Tổng hợp tài nguyên labs và bài tập Phân tích và xử lý mã độc (Malware Analysis)

  Malware Analysis   Dec 21, 2019   0   12140  Add to Reading List
Tổng hợp tài nguyên labs và bài tập Phân tích và xử lý mã độc (Malware Analysis)

Trong bài này tôi sẽ thường xuyên cập nhật các nguồn tài nguyên, websites, blogs, tutorials...hướng dẫn làm labs và bài tập môn Phân tích và xử lý mã độc (Malware Analysis):

1. Malware Analysis Tutorials: a Reverse Engineering Approach

Nguồn: Link

Malware Analysis Tutorial 1- A Reverse Engineering Approach (Lesson 1: VM Based Analysis Platform) 
Malware Analysis Tutorial 2- Introduction to Ring3 Debugging 
Malware Analysis Tutorial 3- Int 2D Anti-Debugging .
Malware Analysis Tutorial 4- Int 2D Anti-Debugging (Part II) 
Malware Analysis Tutorial 5- Int 2D in Max++ (Part III) .
Malware Analysis Tutorial 6- Self-Decoding and Self-Extracting Code Segment .
Malware Analysis Tutorial 7: Exploring Kernel Data Structure .
Malware Analysis Tutorial 8: PE Header and Export Table .
Malware Analysis Tutorial 9: Encoded Export Table . 
Malware Analysis Tutorial 10: Tricks for Confusing Static Analysis Tools .
Malware Analysis Tutorial 11: Starling Technique and Hijacking Kernel System Calls using Hardware Breakpoints .
Malware Analysis Tutorial 12: Debug the Debugger - Fix Module Information and UDD File .
Malware Analysis Tutorial 13: Tracing DLL Entry Point .
Malware Analysis Tutorial 14: Retrieve Self-Decoding Key .
Malware Analysis Tutorial 15: Injecting Thread into a Running Process .
Malware Analysis Tutorial 16: Return Oriented Programming (Return to LIBC) Attack .
Malware Analysis Tutorial 17: Infection of System Modules (Part I: Randomly Pick a Driver).
Malware Analysis Tutorial 18: Infecting Driver Files (Part II: Simple Infection) . 
Malware Analysis Tutorial 19: Anatomy of Infected Driver 
Malware Analysis Tutorial 20: Kernel Debugging - Intercepting Driver Loading .
Malware Analysis Tutorial 21: Hijacking Disk Driver 
Malware Analysis Tutorial 22: IRP Handler and Infected Disk Driver
Malware Tutorial Analysis 23: Tracing Kernel Data Using Data Breakpoints 
Malware Analysis Tutorial 24: Tracing Malicious TDI Network Behaviors of Max++  
Malware Analysis Tutorial 25: Deferred Procedure Call (DPC) and TCP Connection 
Malware Analysis Tutorial 26: Rootkit Configuration 
Malware Analysis Tutorial 27: Stealthy Loading of Malicious Driver  
Malware Analysis Tutorial 28: Break Max++ Rootkit Hidden Drive Protection
 Malware Analysis Tutorial 29: Stealthy Library Loading II (Using Self-Modifying APC) 
Malware Analysis Tutorial 30: Self-Overwriting COM Loading for Remote Loading DLL
 Malware Analysis Tutorial 31: Exposing Hidden Control Flow 
 Malware Analysis Tutorial 32: Exploration of Botnet Client 
Malware Analysis Tutorial 33: Evaluation of Automated Malware Analysis System I (Anubis)  
Malware Analysis Tutorial 34: Evaluation of Automated Malware Analysis Tools CWSandBox, PeID, and Other Unpacking Tools

2. Kiến thức cơ bản về an ninh mạng

Nguồn: Link

3. Tổng hợp các bài viết hay về Virus/Malware

Nguồn: Link

1. Phát tán mã độc

2. Mã độc trên mobile

3. Phân tích một số loại mã độc điển hình

4. Phân tích Ransomware

5. Phân tích virus lây file

6. Phân tích rootkit

7. Phân tích bootkit

8. Phishing

9. Tấn công APT

10. Phân tích adware

11. Phân tích botnet

12. Mã độc trong office

4. Tổng hợp các bài labs sách Practical Malware Analysis

Nguồn:

Link1

Link2

BONUS KHÓA HỌC

1. https://samsclass.info/126/126_F19.shtml

2. https://github.com/albertzsigovits/learn_mlwr_re

How to start RE Articles

https://hshrzd.wordpress.com/how-to-start/
http://amanda.secured.org/how-to-start-reverse-engineering-malware/
http://www.hexacorn.com/blog/2018/04/14/how-to-become-the-best-malware-analyst-e-v-e-r/
https://medium.com/secjuice/the-road-to-reverse-engineering-malware-7c0bc1bda9d2
https://blogs.cisco.com/security/malware-analysis-for-the-incident-responder
https://www.alienvault.com/blogs/security-essentials/the-life-of-a-security-researcher
https://blog.malwarebytes.com/security-world/2012/09/so-you-want-to-be-a-malware-analyst/
https://lifeinhex.com/how-to-learn-reverse-engineering/
http://www.bluekaizen.org/how-to-be-a-malware-researcher/
https://toddcullumresearch.com/2018/01/21/become-remain-malware-researcher/

Malware and RE blogs

Fumik0 - https://fumik0.com/
0verfl0w - https://0ffset.net/
Hexacorn - http://www.hexacorn.com/
Uperesia - https://www.uperesia.com/
MalwareTech - https://www.malwaretech.com/
MalwareUnicorn - https://malwareunicorn.org/
KrabsOnSecurity - https://krabsonsecurity.com/
MalwareBreakDown - https://malwarebreakdown.com/
MalwareAnalysisForHedgehods - https://struppigel.blogspot.com/
MalwareTrafficAnalysis - https://www.malware-traffic-analysis.net/

Training courses, videos

https://www.begin.re
https://beginners.re
https://challenges.re
https://barbieauglend.re
https://0verfl0w.podia.com
https://www.sentinelone.com/lp/zero2hero
https://github.com/RPISEC/Malware
https://malwareunicorn.org/#/workshops
http://opensecuritytraining.info/Training.html
https://www.twitch.tv/malwaretechblog/videos?filter=all&sort=time
https://www.pluralsight.com/courses/malware-analysis-fundamentals
https://www.pluralsight.com/courses/reverse-engineering-getting-started
https://www.pluralsight.com/courses/dotnet-java-binaries-analyzing-malware
https://www.pluralsight.com/courses/malware-analysis-identifying-defeating-packing
https://www.pluralsight.com/courses/malware-analysis-malicious-documents-performing

Youtube channels

OALabs - https://www.youtube.com/channel/UC--DwaiMV-jtO-6EvmKOnqg/videos
Live0verfl0w - https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/videos
Colin Hardy - https://www.youtube.com/channel/UCND1KVdVt8A580SjdaS4cZg/videos
hasherezade - https://www.youtube.com/channel/UCNWVswPNgn5kutPNa5sprkg/videos
MalwareAnalysisForHedgehogs - https://www.youtube.com/channel/UCVFXrUwuWxNlm6UNZtBLJ-A/videos
Tyler Hudak - https://www.youtube.com/playlist?list=PL-giMT7sGCVLsAhH69uuQPUD2e3cjx8oB
Kindred Security - https://www.youtube.com/channel/UCwTH3RkRCIE35RJ16Nh8V8Q/videos

3. https://github.com/rshipp/awesome-malware-analysis

BONUS Blog
1. https://kienmanowar.wordpress.com/

2. http://blog.opensecurityresearch.com/

3. http://ropgadget.com/sections.html

4. https://maxkersten.nl/

5. https://hshrzd.wordpress.com/how-to-start/

6. https://malwr-analysis.com/ (Có nhiều bài phân tích mẫu)

Tags

What's Your Reaction?

like
8
dislike
0
love
5
funny
3
angry
0
sad
0
wow
3