01 - Intro
02 - Malware History And The Rising of a Threat
03 - APT Attacks
04 - Malware Types
05 - Analyzing Malicious Documents
06 - Real Scenario Spearphishing APT Attack

01 - Incident Discovery And Log Analysis
02 - Splunk Demo
03 - Packet Analysis
04 - Digital And Memory Forensics

01 - x86 Assembly
02 - Static Analysis With IDA Pro
03 - Intro to Dynamic Analysis
04 - Dynamic Analysis With Ollydbg
05 - Example From a Real Malware (Tibet Malware)

01 - Malware Analysis Process
02 - How To Approach a Sample
03 - Basic Static Analysis
04 - Behavioral Analysis
05 - Pony Malware - Tool Intro
06 - Pony Malware - Basic Static Analysis
07 - Pony Malware - Behavioral Analysis

01 - Application Execution Process
02 - APIs and DLLs
03 - Tibet APT Attack Intro
04 - Tibet Malware Analysis

01 - Encoding vs Encryption
02 - Tibet Malware DecryptFunc
03 - RC4 Algorithm Analysis
04 - Manual Unpacking
05 - RSA Encryption Algorithms
06 - Manual Unpacking

01 - Process Injection Intro
02 - Process Injection
03 - Anti-Reversing Techniques

01 - Banking Trojans & Webinjects
02 - API Hooking
03 - POS Malware In Brief
04 - Dexter POS Malware

01 - Vulnerabilities and Exploits
02 - Shellcode
03 - Shellcode Analysis
04 - PDFStreamDumper
05 - Analyzing Malicious Documents

01 - Windows Kernel Internals
02 - Kernel-Mode Hooking
03 - MRxNet - Stuxnet Rootkit
04 - Process Injection From Kernel-Mode
05 - SRDF and Process Injection

01 - Threat Intel
02 - Yara Signatures
03 - Connecting The Dots
04 - Machine Learning

Курс: Advanced Web Attacks and Exploitation (2019)

#web #cource

Курс: API Security Offensive and Defensive

ИМХО: хороший, маленький курс про работу разных API и атаки на них.

#pentest #web #cource

01 - Introduction
02 - Rest
03 - Discovery
04 - Fuzzing
05-08 - Basic and Digest Auth
09 - Token and Cookie
10-11 - JWT
12-15 - OAuth
16-17 - OAuth + (CSRF and XSS)
18 - DDoS
19 - Brute force
20 - Dev/Staging/Old API
21 - Traditional attacks

Отчет Morphisec: The evolution of the FIN7 jssloader

#malware #apt #report

Blue Team Handbook

#blueteam

PVS-Studio - инструмент для выявления ошибок и потенциальных уязвимостей в исходном коде программ, написанных на языках С, C++, C# и Java. Работает в 64-битных системах на Windows, Linux и macOS и может анализировать код, предназначенный для 32-битных, 64-битных и встраиваемых ARM платформ.
+ умеет интегрироваться в среду разработки Visual Studio 2010-2019.

#soft