• Online, Instructor-Led
Course Description

Students will learn how to produce a shellcode blob capable of loading and injecting multiple malicious binaries via techniques repurposed from existing malicious samples. This course includes APIs and techniques used to perform common malicious functionality and extends these techniques to produce reliable payloads that function across operating system versions and limit exposure to security products.

Learning Objectives

After completing this course, learners should be able to: • Develop malicious applications using the Windows SDK • Create position independent code (PIC) using C and Intel Assembly • Write malicious code to perform code injection and modify a running application in-memory • Analyze and modify a malicious binary to reuse functionality • Design and write reliable payloads across a variety of operating system versions • Use proven techniques to execute injections, hooking, and fingerprinting across various systems

Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

Specialty Areas

  • Exploitation Analysis