Hack Forums
[C] Best place to learn malware coding/reversing in C/C++ - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C] Best place to learn malware coding/reversing in C/C++ (/showthread.php?tid=5852115)

Pages: Pages 1 2


Best place to learn malware coding/reversing in C/C++ - F-Nuke - Jun 20, 2018

What is the best place to learn malware coding/reversing in C/C++? Forums, general resources, books, etc., anything is fine really.

Resources:

https://tuts4you.com/ (Courtesy: aeiro)
http://185.62.190.110/ (Courtesy: Toxcique)
https://hackforums.net/showthread.php?tid=5852115&pid=57264953#pid57264953 (Courtesy: Mr. Kim)

Thank you.


RE: Best place to learn malware coding/reversing in C/C++ - aeiro - Jun 20, 2018

(Jun 20, 2018 06:29 PM)F-Nuke Wrote:  What is the best place to learn malware coding/reversing in C/C++? Forums, general resources, books, etc., anything is fine really.

Thank you.

If you're looking for a forum who's sole purpose is reversing https://tuts4you.com/ is the spot.


RE: Best place to learn malware coding/reversing in C/C++ - F-Nuke - Jun 21, 2018

(Jun 20, 2018 07:04 PM)aeiro Wrote:  If you're looking for a forum who's sole purpose is reversing https://tuts4you.com/ is the spot.

I've known tuts4you for a while. Amazing resources there.


RE: Best place to learn malware coding/reversing in C/C++ - Sajuuk - Jun 21, 2018

(Jun 21, 2018 04:02 AM)F-Nuke Wrote:  I've known tuts4you for a while. Amazing resources there.

Over the years, I've seen this question pop up time and time again. In recent days, I've been reading over the responses to these questions. I'll tell you now that my response will be biased, but I'll try to keep it as neutral as I possibly can.

Tuts4you does have an abundance of extremely detailed documents for almost if not every aspect of malware and it's (efficient) development. But, from my perspective, also taking into account the years I've had to review the information given, there is no one true resource that covers everything that can be done. That includes everything, including websites, books, and guides.

And that alone is the reason why quite a few people say programming skill comes from the person's style. And the person's style usually comes from how they learned the craft. That's how, and what, of course. It comes with time, but it will only come with time if the person dedicates that time to learning and practicing.

All of that time cannot be spent in one book alone. Different people learn better under different circumstances. Different people have different styles of coding (structure-wise for a simple example). Delve into varying topics. They don't all have to be about a specific part of the process, not do they have to be relative to malware at all.

tl;dr  Tuts4you is the best resource from what I've found. It's essentially a goldmine of documents that cover a wide array of diverse topics across a large number of languages and systems.


RE: Best place to learn malware coding/reversing in C/C++ - F-Nuke - Jun 22, 2018

(Jun 21, 2018 07:22 PM)Sajuuk Wrote:  Over the years, I've seen this question pop up time and time again. In recent days, I've been reading over the responses to these questions. I'll tell you now that my response will be biased, but I'll try to keep it as neutral as I possibly can.

Tuts4you does have an abundance of extremely detailed documents for almost if not every aspect of malware and it's (efficient) development. But, from my perspective, also taking into account the years I've had to review the information given, there is no one true resource that covers everything that can be done. That includes everything, including websites, books, and guides.

And that alone is the reason why quite a few people say programming skill comes from the person's style. And the person's style usually comes from how they learned the craft. That's how, and what, of course. It comes with time, but it will only come with time if the person dedicates that time to learning and practicing.

All of that time cannot be spent in one book alone. Different people learn better under different circumstances. Different people have different styles of coding (structure-wise for a simple example). Delve into varying topics. They don't all have to be about a specific part of the process, not do they have to be relative to malware at all.

tl;dr  Tuts4you is the best resource from what I've found. It's essentially a goldmine of documents that cover a wide array of diverse topics across a large number of languages and systems.

I agree. Tuts4you is pretty awesome. But it leans more towards the reversing scene.

Do you happen to know of any forums of sorts where one can hold discussions solely on malware development/analysis?


RE: Best place to learn malware coding/reversing in C/C++ - Toxcique - Jun 22, 2018

This webpage is also great:
http://185.62.190.110/


RE: Best place to learn malware coding/reversing in C/C++ - F-Nuke - Jun 22, 2018

(Jun 22, 2018 02:57 AM)Toxcique Wrote:  This webpage is also great:
http://185.62.190.110/

This looks great! Thanks for sharing. :)


RE: Best place to learn malware coding/reversing in C/C++ - Mr. Kim - Jun 25, 2018

Check out this channel: link

It has all kinds of playlists on arm assembly, x86 assembly, rootkit development, and a lot of other awesome shit. If you learn more from listening than reading, these can be a godsend. They're very high quality and 100% free. In addition to that channel I've come across all kinds of various lectures on you tube over the years. Below are some of the best ones imo.

Stuxnet analysis - Bruce Dang (Microsoft) - link
Inside the Mac OS X Kernel - "Lucy" - link
Unleashing An x86 Design Flaw Allowing Universal Privilege Escalation - Christopher Domas - link
Breaking the x86 Instruction Set - Christopher Domas - link


As far as books go:
Windows Internals (any edition, 7 or 6 ideally) - Various Microsoft people
The Rootkit Arsenal - Bill Blunden
Rootkits: Subverting the Windows Kernel - Greg Hoglund & James Butler


For source code to study, presuming windows is your main focus take a look at the windows research kernel as well as the reactos source

Lemme know if you have any questions 🎉


RE: Best place to learn malware coding/reversing in C/C++ - HiddenEyE - Jun 27, 2018

nice post mates. but i still believe in old new things.


RE: Best place to learn malware coding/reversing in C/C++ - Mr. Kim - Jun 29, 2018

(Jun 27, 2018 02:17 AM)HiddenEyE Wrote:  nice post mates. but i still believe in old new things.

What do you mean by this?


RE: Best place to learn malware coding/reversing in C/C++ - int - Jun 29, 2018

for reversing malware, I liked that guy max on youtube. I looked for a link, didn't find it. They aren't step by step tutorials, but they show you the tools that are needed for reversing.


RE: Best place to learn malware coding/reversing in C/C++ - SteamedHams - Jun 29, 2018

You can add rohitab.com to the list, but at this time it is a bit of a ghost town.


RE: Best place to learn malware coding/reversing in C/C++ - inyourmemory - Jun 30, 2018

Best to start reading some malware analysis blogs and sites, they often explain detailly how the malware works and what mistakes were made and even sometimes include code snippets.


Then your usual malware sources and classic ones line Zeus.


RE: Best place to learn malware coding/reversing in C/C++ - Kali_Shadow - Jul 2, 2018

good share bro , Thanks for the links ... !!


RE: Best place to learn malware coding/reversing in C/C++ - Sparkling Jack - Jul 11, 2018

In terms of malware coding tech, I recommend this website.  
w ww.malware tech.com

It has many recent malware coding techniques and methods.
It will be a good choice for understanding how malwares work.