课程目录

• 课程所需课件-第四期免杀
• day10：cs特征二开 (1)
• day12：高级注入技术 (1)
• day13：过核晶启动项拦截绕过 (1)
• day14：内存执行-COFF Loader (1)
• day15：Kill AV、EDR (1)
• day16：Windows组件对象模型 (1)
• day17：Windows RPC (1)
• Day18：BypassUAC (1)
• Day19：Dump Hash (1)
• day1：编程基础知识-C (1)
• Day20：终章 (1)
• day2：从C语言到Windows核心编程 (1)
• day3：检测机制 (1)
• day4：静态绕过+无脑上线360+QVM202绕过 (1)
• day5：直接&间接系统调用 (1)
• day6：去特征 (1)
• day7：规避内存扫描 (1)
• day8：反分析技术 (1)
• day9：PE后门 (1)
• 课程所需软件工具
• 03 VS2019编译器安装包
• AccessChk
• AheadLib-bin
• AntSword-Loader-v4.0.3-win32-x64
• APIHashReplace
• apimonitor-x64.exe
• autoruns
• beaengine-5.3.0
• burpsuite_pro_v2020.4
• CFF Explorer
• chrome
• DbgPlugin专用CE64
• DebugView
• depends22_x64
• Detours-4.0.1
• dnSpy-net-win32
• dnSpy-net-win64
• DotNetToJScript
• DriverLoaderUnloader
• GarbageMan-0.2.4
• GetInfo
• ghidra
• Handle
• Hex-Rays IDA Professional Advanced Floating And Decompiler Full Activated
• MalwareTools
• malzilla_1.2.0
• Metasploit Pro4.21.0破解补丁
• mimikatz (2)
• mimikatz
• netcat-1.11
• OleViewDotNet
• pe2shc
• PowerSploit-3.0.0
• Process Monitor3.87
• ProcessExplorer
• PSTools
• Rattler
• README
• ResourceHacker.exe
• resource_hacker
• RpcView64
• ScyllaHide
• SharpHound-v2.3.0
• Spy (2)
• Spy
• sqlmap
• style
• symbol_link
• Sysmon
• SysmonView
• SysmonViewDB
• TakeColor
• ThreatCheck-master
• TokenViewer
• v2rayN-Core
• VirTest5.0
• wallhaven-gjjj9q
• wallhaven-q2ekkd
• wallhaven-z8dg9y
• webshellTools (2)
• Win32
• windeflogview_schinese
• Windows 数字签名制作
• WinObj
• WmiExplorer_2.0.0.2
• x64
• x64dbg
• XTP库1501安装版
• yara-v4.1.3-1755-win64
• [F0] Kenny, Kill AV in x64