
Outline of malware development course architecture, featuring a victim client and attacker web app, with HTTP requests, Apache, MySQL, and tools like C#, PowerShell, .NET Core, Visual Studio Code, Atom.
After this lecture you will have the files for virtualization. Do not forget to check Resources for better learning experince.
Install .NET core, Visual Studio Code, and the C# extension on Windows, set up a trivial dotnet console project, and run Hello world to verify the environment.
After this lecture you will be able to install Apache, PHP and Mysql on ubuntu. Do not forget to check Resources for better learning experince.
After this lecture you will be able to gather information such as ip address, hostname, user privileges in victim's system. Do not forget to check Resources for better learning experince.
After this lecture you will be able to gain persistence on Windows system by using Start-Up feature. Do not forget to check Resources for better learning experince.
After this lecture you will be able to download files in victim's computer. Do not forget to check Resources for better learning experince.
After this lecture you will be able to change working directory and list files/folders under a directory. Do not forget to check Resources for better learning experince.
After this lecture you will be able to execute commands via CMD. Do not forget to check Resources for better learning experince.
After this lecture you will be able to deal with exceptions using try catch blocks. Do not forget to check Resources for better learning experince.
After this lecture you will be able to connect to attacker server using GET requests. Do not forget to check Resources for better learning experince.
After this lecture you will be able to create a database. Do not forget to check Resources for better learning experince.
Design a login page with an HTML form using POST, process credentials in PHP with MySQL prepared statements, hash passwords with MD5, and manage sessions to redirect to control panel.
Create a control panel user using insert into users with id one and username admin. Set the password as the md5 hash of the md5 hash of changeme.
Create a PHP session control mechanism that checks the session username, calls session_destroy() and die(), and redirects to login using header() for security.
Create a registration page for victims that handles post requests with hostname, ip address, and operating system, inserting data via a prepared statement into the victims database.
Build a command center page that, via post requests with hostname, IP address, and operating system, fetches commands from a database using prepared statements and then clears the command.
Create a result receiver page that processes post requests with hostname, IP address, and result, and saves the data to a database via a MySQL prepared statement.
Create the victim management pages, including a manage page with a comment form and a show results page that fetches results every two seconds via PHP and XML http requests.
Are you interested in cybersecurity and/or developing your computer virus in ethical hacking purposes ?
In this course, we will dive deep into the malwares and control panels by creating an actual one from zero ! You will learn how to develop your own custom malware from scratch with step-by-step detailed instructions for beginners. You will also learn how to enhance your malware's capabilities by developing special methods such as gathering host information, gaining persistance, uploading files to victim computer and executing commands via Command Line. After developing your own malware, you will then develop a custom attacker server software to control multiple victims at the same time from a web panel like professional C2 servers using PHP and MySQL.
This course will provide you with everything you need to know in terms of malware and command-control server in beginner level. After this course you will feel more confident in your skills as a penetration tester, ethical hacker and red teamer. You will also have a fundamental understanding of offensive tools. If you are a blue teamer, threat hunter or incident responder, you can also benefit from this course by knowing how threat actors and APT's develope their malwares and command control structures.
All of the captions are reviewed so feel free to use it for better learning experience.