filmov
tv
Tutorial: Hunting Linux malware for fun and $flags
Показать описание
Marc-Etienne M.Léveillé
Server-side Linux malware is a real threat now. Unfortunately, as for its Windows counterpart, most system administrators are inadequately trained or don't have enough time allocated by their management to analyze and understand the threats that their infrastructures are facing. This tutorial aims at creating an environment where Linux professionals have the opportunity to study such threats safely and in a time-effective fashion.
In this introductory tutorial you will learn to fight real-world Linux malware that targets server environments. Attendees will have to find malicious processes and concealed backdoors in a compromised Web server.
In order to make the tutorial accessible for a range of skill levels several examples of malware will be used with increasing layers of complexity -- from scripts to ELF binaries with varying degrees of obfuscation. Additionally, as is common in Capture-The-Flag information security competitions, flags will be hidden throughout the environment for attendees to find.
Requirements
* Some programming experience
* Good understanding of Linux server systems (userland)
* Pre-installed tools: text-editor, radare2, gdb
* Optional: ipython, IDA Pro (proprietary)
Skills to acquire
* Live system incident response and forensics using Linux's standard tools
* System hardening
* Introduction to reverse-engineering obfuscated scripts and binaries
Server-side Linux malware is a real threat now. Unfortunately, as for its Windows counterpart, most system administrators are inadequately trained or don't have enough time allocated by their management to analyze and understand the threats that their infrastructures are facing. This tutorial aims at creating an environment where Linux professionals have the opportunity to study such threats safely and in a time-effective fashion.
In this introductory tutorial you will learn to fight real-world Linux malware that targets server environments. Attendees will have to find malicious processes and concealed backdoors in a compromised Web server.
In order to make the tutorial accessible for a range of skill levels several examples of malware will be used with increasing layers of complexity -- from scripts to ELF binaries with varying degrees of obfuscation. Additionally, as is common in Capture-The-Flag information security competitions, flags will be hidden throughout the environment for attendees to find.
Requirements
* Some programming experience
* Good understanding of Linux server systems (userland)
* Pre-installed tools: text-editor, radare2, gdb
* Optional: ipython, IDA Pro (proprietary)
Skills to acquire
* Live system incident response and forensics using Linux's standard tools
* System hardening
* Introduction to reverse-engineering obfuscated scripts and binaries
1:34:04
Tutorial: Hunting Linux malware for fun and $flags
0:46:17
Hunting Linux Malware for Fun and Flags
0:06:01
How To Threat hunt Like A Pro: The Easy Way
0:46:17
ESET: Linux Malware Hunter Reveals His Tips
0:02:08
How to Hunt for Linux Malware with a Cryptographic Hash
0:00:05
Malware Investigation | framework | malware hunting | Linux investigation
0:42:44
Threat Hunting On Linux And Mac With Auditbeat System Module - Aaron Jewitt
0:13:51
Hunt for Hackers with Velociraptor
0:03:54
Stop Using Cryptographic Hashes to Find Linux Malware
0:42:23
Threat Hunting Examples with Linux Command Line Tools
0:07:20
Command Line Forensics to Find Masquerading Malware on Linux
0:00:57
No Tools in a CTF
0:02:15
Hunting for Malicious Linux Process Names with Agentless Sandfly Security
0:14:29
Is your PC hacked? RAM Forensics with Volatility
0:15:02
Hunting Linux rootkits using volatility
0:40:00
Analyzing Windows Malware on Linux: Getting Started Tips and Examples
0:08:32
Hunting for GobRAT: Golang Malware Targeting Linux Routers
0:03:57
Hunting for Linux Intrusion Tactics is Better than Searching for Exploit Signatures
0:21:29
r2con 2016 - zl0wram - Reversing Linux Malware
0:02:08
How to Use Agentless Security to Hunt for Suspicious Users on Linux
0:06:14
Securing Your Linux System: A Comprehensive Guide to RKHunter (Rootkit Hunter)
0:12:21
Linux Crypto Mining Malware Sensationalism
0:02:25
5 Linux Tools Making It Scary Easy for Hackers to Hack You
0:00:31
Steam Piracy
Комментарии