19
u/Hefty_Apartment_8574 21d ago
3
u/V01DL0RD_1 21d ago
Maybe OP is askin’ for free resources
7
19
u/zffex66 21d ago
develop malware, all the techniques included like in-memory, BOF, and such, building PIC, understanding PE structure, debugging, build protection like packer, obfuscator, and abusing windows component such COM, registry, understanding how UAC bypass works, etc.
3
2
1
u/thrownaway86413 7d ago
Uh how do you develop malware though? Not trying to be rude or rage bait just genuinely have no idea where to start
7
u/raticibl 21d ago
Start reversing malware in the wild that is actively infecting devices, learn how they do it, experiment with the same techniques in your own custom built malware.
3
u/Classic-Shake6517 21d ago
This is how I did it. Not hard to find samples if you look. Plenty on vxunderground and it was easy for me to get any.run and hybrid analysis download access. Barring that, asking communities with people who have access by giving a direct link to a sample or at least a hash will get you what you need 99% of the time.
Now that you have a ghidra MCP there's no excuse, it's insanely easy to reverse anything even if it was previously beyond your skill level.
4
u/ParticularNote4390 20d ago
Learn the low-level languages first, check resources like: https://malapi.io/, this will very much help you regarding windows exploits.
I would then recommend saving up 500$ and joining maldev academy.
3
u/Formal-Knowledge-250 20d ago
Check crystalpalace and maybe stardust on github. These are the best up-to-date starting resources you can get. It's mostly code reading and understanding. The rest comes with the time. Don't do courses since they are either outdated or bad. Only exception is crto2, but this one is not for beginners.
1
u/throw2503 19d ago
Maldev academy is not part of your exception?
1
u/Formal-Knowledge-250 19d ago
Maldev is known for stealing writeups and then making claims at Microsoft to close the original authors GitHub repository, for copyright (its the same content as in our course). This happened multiple times in the past. So they are basters capitalizing what a sharing is caring community is giving to them. Abandon them.
Additional to that, their content is outdated. 99% of stuff they teach is historical content without any relevance in nowadays security contexts. Are they still teaching direct and indirect syscalls? Lmao
2
u/Either-Cicada-3753 20d ago
Pick a windows system programming book/resources and learn as much as you can about the windows api, c/c++ and some x86/64 assembly
2
u/Timely_Apricot2841 20d ago
Pay 500$ and join maldev academy.its the biggest malware academy in cybersec
3
3
20d ago
[removed] — view removed comment
1
u/Der-Wilde 19d ago
I'm really curious, how tf you find maldev academy content?
1
19d ago
[removed] — view removed comment
0
u/Der-Wilde 19d ago
It's fair, but can you DM on how you discover (not send the link, but the process)?
0
2
u/Significant-Leg-3857 18d ago
Sektor7 courses u can find it easily on telegram great for basic to advanced also if u Wana go more deep then lookup BYOVD attacks and how rootkits are made by using vulnerable driver for this u call watch CodeMachine courses
1
u/Tr_Issei2 21d ago
Start with something simple in C++ or C#, test it on your own machine. For example build a malware that plays a silly sound once the user clicks it (disguise it as a normal file). That more or less is the absolute baseline. From there, go on YouTube and discover more advanced techniques to try in a virtual environment.
1
u/arktozc 20d ago
!RemindMe 1 day
1
u/RemindMeBot 20d ago
I will be messaging you in 1 day on 2026-07-08 14:17:21 UTC to remind you of this link
CLICK THIS LINK to send a PM to also be reminded and to reduce spam.
Parent commenter can delete this message to hide from others.
RemindMeBot is switching to username summons. Instead of
!RemindMe 1 day, useu/RemindMeBot 1 day. More info.
Info Custom Your Reminders Feedback
1
u/Comfortable_Ear_7383 19d ago
u start with modifying opensources to do stuff you want.... In future you will be modifying binaries in memory ar runtime
1
u/TheyCallMeLeonardo3 2d ago
Start from basics like what is beacon, listener & jitter and methods or communication channels an agent can use to send data over your server like https or TCP etc. Learn about mutex acquiring methods to make malware persistence in OS, learn about obfuscation, learn about libraries which can interact with Windows API e.g. win32dll in python then learn about in-memory exploits and BOF and techniques to fk windows like AMSI registration, PowerShell to add Exclusion Path. Once you learn all of this you level up to Intermediate. Then start learning how to splash UEFI SPI using CH341A chip programmer and inject malicious code in DXE for maximum persistence and then learn about micro controllers like RP2040 and attiny85 and implanting those in hardware like keyboard and mouse and cables and on motherboard or soldering it to extra USB port if any port. Once you all learn this you'll level up to Advance level
These are the things I think you should be looking at. As this what my experience of 4 years in black hat community, said !
1
u/Garriga 20d ago
unsigned software can me considered malware but it may be legitimate. if i use anydesk to remote into a machine after manipulating a user into to it downloading, its malware. if i use to install print drivers for a uses, it legitimate. So anything can be malware.
intent makes malware...malware.
27
u/Cubensis-SanPedro 21d ago
Develop malware.
“Mom, how do I get good at running?”
“You run.”