How Hackers Write Malware & Evade Antivirus (Nim)

Рет қаралды 379,539

10 ай бұрын

jh.live/maldevacademy || Learn how to write your own modern 64-bit Windows malware with Maldev Academy! For a limited time you can use code 'HAMMOND10' to save 10%! jh.live/maldevacademy
🔥 KZfaq ALGORITHM ➡ Like, Comment, & Subscribe!
🙏 SUPPORT THE CHANNEL ➡ jh.live/patreon
🤝 SPONSOR THE CHANNEL ➡ jh.live/sponsor
🌎 FOLLOW ME EVERYWHERE ➡ jh.live/discord ↔ jh.live/twitter ↔ jh.live/linkedin ↔ jh.live/instagram ↔ jh.live/tiktok
💥 SEND ME MALWARE ➡ jh.live/malware

Пікірлер: 225

@volodymyrdrapak3842 10 ай бұрын

Never said "Don't try this at home" or "Only for educational purposes". My hero.

@siummuis4640 10 ай бұрын

My father

@opus_X 10 ай бұрын

My daddy

@fuckbitchesgehmoney 10 ай бұрын

my sperm donor

@AlterraLaboratories 10 ай бұрын

@@timelessnesses nonono, hes OURS

@ChickenGamingFlamingoLegs 10 ай бұрын

@@opus_Xuwu

@SkeeterPondRC 7 ай бұрын

When John says "I know this video is already getting long" and you are like "huh? keep going cause this is really interesting" Dont cut your videos short because you think we might be getting bored. This is awesome stuff! I would LOVE to see a longer video on this. Im a red teamer so building custom malware is something I really want to start playing with.

@Sevenigma777 9 ай бұрын

Its things like this that got me into computers as a child in the 80s. There was like this secret world of PCs that the casual user never would experience. Whether it was just pirating software or hacking into networks it made you feel like absolutely anything is possible you just had to acquire the knowledge for it. Even to this day with how streamlined the modern PC experience is there is still a hidden world filled with programs and operations that even a well versed daily PC user has no clue they exist and I absolutely love it!

@Lampe2020 10 ай бұрын

I somehow always get motivated to program my own projects when watching your videos XD

@kent0n144 10 ай бұрын

its because you think it will be as easy as watching him do it , thats just how i feel

@Agile691 10 ай бұрын

@@kent0n144very true😢

@duckyDz 10 ай бұрын

Even thought the creators of the language said in their forum "please don't create malware with Nim" ... thanks for the video. It's nice when the language gets some attention. It is very nice, especially for the people who love Python.

@marianoaponte2518 10 ай бұрын

I love how Ed Sheeran is teaching me how to write a malware lol

@redjhone8209 10 ай бұрын

😂😂

@malwaretestingfan 10 ай бұрын

On point.

@amirakmel123 10 ай бұрын

😂😂you make my day

@jg2283 8 ай бұрын

Whenever I read shit like this I cringe at how often the receiving person must get this joke, like when ultrasound techs hear "is it a boy or a girl?"

@voodooexile2026 9 ай бұрын

Dude I love your content. You go very deep with basic language that takes me step by step. Good job and keep up the hard work :). Just want to ask you, why don't you make videos about cloud security. I know it is a massive topic, and I would love watching more about it, especially from you.

@XenoTravis 4 ай бұрын

This is a nice video on how to read code manuals. A big thing I wish I was taught earlier is how to not rely on examples of code and be able to know what to do from the manuals.

@neoninsv 10 ай бұрын

I was about to skip the ad but stuck around when I heard the names. That looks like a solid platform.

@edwinrosales6322 10 ай бұрын

Dude, I like how you cover so much material in such a efficient time, I really appreciate it!

@guilherme5094 10 ай бұрын

Thanks John, great video👍! I just love the Nim language.

@hamedranaee5641 10 ай бұрын

Hey Johny ! I like that the way you teach something, you Rock dude 🤘

@JoakimBB 10 ай бұрын

Was waiting for this to be posted.

@TheHangman1995 10 ай бұрын

I have been wanting to learn NIM for a while. I might try to use it for my upcoming OSEP (I know that they want me to use python and C# but I don't think it matters.).

@creed404 10 ай бұрын

This is my first time hearing about this nim it’s syntax looks a little similar to python, tnx for this interesting tutorial

@Aziqfajar 10 ай бұрын

Finally, Nim will be shone into light. Great video, even though Nim don't endourse making malware with it 😂

@anta40 10 ай бұрын

Any language than can be compiled into native executable (with relatively smallish runtime) will be used to write malwares. In the past: asm, C/C++, delphi. Now what: go, rust, nim, D?

@crr0ww 10 ай бұрын

Awesome video, man! Keep up the great work :)

@abdullahshoukat8056 10 ай бұрын

🎉

@kushansingh6244 10 ай бұрын

Waiting for your malware development part 3 lol

@Timm2003 10 ай бұрын

Keep it up too, really like ur Videos!

@Gobillion160 10 ай бұрын

crow what are u doing here bro

@PySnek 10 ай бұрын

Nim is such a great language! The syntax of Python and the speed of C

@pavi013 8 ай бұрын

That was very technical, but interesting video!

@eduardabramovich1216 10 ай бұрын

I wish you could create a series of Nim focused on offensive and defensive tools.

@ligiat134 10 ай бұрын

0:34 no!

@juanvalcecchi3464 10 ай бұрын

@@ligiat134xplain

@skydrige 10 ай бұрын

Hey big fan of yo man (Cyber Security Student)

@cot3chcot3ch96 10 ай бұрын

good job john keep it up. i love you

@goohbr 10 ай бұрын

thanks man. liked a lot.

@zsi 9 ай бұрын

Writing malware is easy. In an airgapped network, deploy AV, EDR, and IPS+IDS to a couple of VMs and at a gateway. That takes maybe 1 day. Now you have a lab. Write custom malware, deploy, and see what gets caught. Don't even need to be complicated malware, just basic functions that do what you want it to do. Now, be creative in how you obfuscate its code and operations. Live off the land. On one red team, I got Mimikatz to slip right past their EDR simply by prefixing the PowerShell with 200 MB of comments. It's too large to analyze, so the EDR didn't bother. A few months ago, I got a basic reverse shell to work by having the code hide itself in new LNK files that pulled the rest of the code from environment variables.

@xTwistCinema 9 ай бұрын

Parsing junk to files to bypass AV is such a funny thing to see work. So trivial to do as well!

@FitnessNationOfficial 8 ай бұрын

"GPT4 please explain this like if I was 5 years old"

@0xSingularity 10 ай бұрын

I’ve been studying exploit dev for the last month or so, I already have programming experience and work in cyber. I picked up Maldev Academy yesterday, and feel like it is going to give me a years worth of experience in just a couple weeks by how in-depth it is. It’s expensive, but I justified the cost by thinking about how many hours I’d spend researching to find all of the same info. The framework they give you for learning maldev is amazing.

@rxtechandtrading 10 ай бұрын

how much is it ? and can you get ur money back if u find it worthless..so many companies claim that they are the best, then when u pay for a subscription, it SUCKS

@0xSingularity 10 ай бұрын

@@rxtechandtrading lifetime access is $499, with Johns discount code it was $450. IMO I think it's very good. Like I said in my comment above, you can find all of the info from doing your own research, but the time save this gives is worth it.

@anupkarki8237 10 ай бұрын

Hey any idea how hackers bypass 2FA in facebook. How they get the code or do something else? I had 2FA in fb was hacked. Fb has no customer support either. Wondering if ya have any idea. Thanks.

@rxtechandtrading 10 ай бұрын

@@anupkarki8237 I think it has something to do with a technique called CSF -client side forgery request -but there is some phishing involved with that i believe-you essentially need the token or session cookie of another authenticated user -if that is what u r trying to do

@xTwistCinema 9 ай бұрын

@@rxtechandtradingfrom what I know, you’d be very lucky to find Facebook allowing CSRF on any of their pages

@AmazingJayB51 10 ай бұрын

Not watching to learn how to do but to understand how it’s done 😌

@khackney86 10 ай бұрын

John you’re the man!!!!!

@Jake-km7wp 10 ай бұрын

I am so excited to check out MalDev, thanks for sharing your thoughts on it!

@gelbertrivas4211 3 ай бұрын

Can you give me your thoughts about MalDev when you take it, I’m so curious

@janAkaliKilo 10 ай бұрын

I'm not a fan of malware (for obvious reasons), but if people will start learning Nim because of it, maybe they will see all that's good about Nim outside of it's offensive application. Good Video, as usual.

@scootergirl3662 10 ай бұрын

The point of learning to write malware is to better understand how to identify and protect against it, at least from a ethical hacking perspective

@ayyleeuz4892 10 ай бұрын

many software use these methods, they hook methods in your operating system for example anti malware, anti cheat software for games, DRM for proprietary software, etc. it is a very good topic to get into

@ycart_tech6726 10 ай бұрын

@@scootergirl3662 when I was younger I was into all things strategic warfare, biological warfare, WMD, stuff like that... it got to a point where I had downloaded every piece of literature that places like think tanks working for the US government, Janes, Los Alamos Laboratories and that famous Russian Biopreparat scientist defector allowed to leak in the public domain(I am not from the States but we are allied close enough that I still thank my lucky stars for not ending up in Guantanamo...)... I don't know why others study malware but I just love me some forced complex system disassembly... a string of code bringing a whole system down? I get off on that!!! I also once cried when I accidentally suffocated a praying mantis I had caught in a jar... holes in the lid, y'all... holes in the lid...

@madmax7539 10 ай бұрын

@scootergirl3662 that's what i thought he was gonna do but ok.

@fullmetaltheorist 10 ай бұрын

When I learn a new programming language I write "What's up bitches?!" Instead of "Hello World."

@officialCLOZVRE 10 ай бұрын

with a thumbnail like that who could resist clicking 🙃

@learning_with_irving4266 9 ай бұрын

This is what a hero looks like

@cot3chcot3ch96 10 ай бұрын

nice tutotorials, i think john ippsec trix are the best in our era.

@leetbrain5592 8 ай бұрын

who's trix .??

@YannMetalhead 9 ай бұрын

Great video.

@sophiophile 10 ай бұрын

Hey man, Can you suggest/make some videos on how decompilation to assembly/key activation (and protections against this) work? It's a topic I've always found interesting, but pretty hard to make headway with, despite being an engineer myself.

@TheodoreWard 9 ай бұрын

Not sure how current it still is, but there is a book called Practical Malware Analysis that you might like, comes with code examples etc...

@sophiophile 9 ай бұрын

@@TheodoreWard Thanks. I'll check that out!

@infostreammining2160 2 ай бұрын

Thanks for this.

@LeadinLP 10 ай бұрын

Am I the only one who think John needs to do a tutorial series on Sublime text? 😂

@filipepinho3319 10 ай бұрын

A malware for many is a goodware for someone else :D

@ianm00n 7 ай бұрын

Nim is a new programming language for me, but maybe i should check that.

@imad6734 10 ай бұрын

Off topic but are you using a type 1 hypervisor ? if so which one ? cause that windows vm is more performant than my native install

@marcinnawrocki1437 10 ай бұрын

First: do not use common required APIs, use something exotic that does same work. Make malware work slowly, do not trigger suspicious behavior. All that usual stuff is tracked by AV software, so do not use it. Use some zero day exploit, do not mass stuff, do slow polymorphic or metamorphic code encryption. But best way: if you can do all of it find legal job, get money there.

@paranormal5042 10 ай бұрын

Him: we gonna see how we can write malware Me: print("malware")

@nikhilkarpe8230 10 ай бұрын

Nice information.

@nishantnarsale6279 10 ай бұрын

Hey John, we want a malware development playlist from you.

@kerryfreudenthaler2986 8 ай бұрын

when u hack can you skip steps or do u have to start in order? very confusing stuff i want to learn but damn

@geeksuperstar8564 10 ай бұрын

Please make more Nim content

@jonathondelemos4609 10 ай бұрын

What’s the limit of this applications applicability? How can you use this method to install data gathering, keystroke loggers, and zombies?

@fedenfer 6 ай бұрын

Hello brother, greetings from Argentina. golang vs rust, for pentesting or red team?

@exosfear512 10 ай бұрын

really want to finish OSEP so i can start modernising my tradecraft with nim, I really don't like Visual Studio + CSharp

@user-ru7qk6ui4u 7 ай бұрын

I've seen some malware written in D. Languages such as Carbon, Zig, Haxe can be used. Could an AI help in these cases of detecting unconventional codes?

@buffer-overflow 7 ай бұрын

Yes, it may be trained to distinguish examples that are malware from legit ones. However, I recently saw a paper, they used machine learning to do essentially this and it could not detect malware when it was encrypted. Maybe a more sophisticated, fine-tuned setup yield better results.

@0xAnomaly 10 ай бұрын

NimGang!

@jghuathuat 10 ай бұрын

hi john, how long is the code valid until?

@cbite1976 7 ай бұрын

you are so fast man

@Error-33 10 ай бұрын

amazing video

@xiaoyi982 10 ай бұрын

If I write a good App, it feels good to know it's out there providing values to end users. If I spend same amount of time writing a piece of malware, then it gets patched, as if never existed, it'll be feelsbadman. So, I don't know... Cool knowledge though.

@ian562ADF52E 10 ай бұрын

Once it's patched just leak the source code and let everyone run rampant with it. Like RAASNet, Zeus/zbot, apfell, etc.

@ian562ADF52E 10 ай бұрын

Also being patched doesn't mean much lol. I've seen Server 2008 R2 in production as recently as 2023.

@firos5381 10 ай бұрын

do more of these vedios

@fahadkhalid2303 10 ай бұрын

Maldev Academy is quite exoensive

@RaGhav363 10 ай бұрын

Make a full vedio on NIM language full course complete ✅

@AlgoRhytm 10 ай бұрын

i wonder if anti-social people actually writes "Hello World!" or if they write "Just you wait motherfuckers...."

@tanhowseng 10 ай бұрын

dang, just paid for maldev academy after seeing your tweet, 2 days before this 10% off dropped 🤦

@TheStrafendestroy 9 ай бұрын

How it the course work for maldev?

@oldschoolgaming6538 9 ай бұрын

No matter what anybody says, videos about hacking/pentesting are always going to be used maliciously, and the knowledge is going to be exploited.

@kipchickensout 8 ай бұрын

After heavily squinting my eyes I wanna tell you that that microsoft doc site has a dark theme when you scroll to the very bottom, on the left side

@IlliaZhdanov 9 ай бұрын

12:38 isnt NULL = 0? Correct me if i'm wrong but i think that NULL is just 0

@fsacer 10 ай бұрын

Where do you tag Cas van Cooten?

@simonrad 9 ай бұрын

just increase the file size of the infected program goes undetected every time. on all windows based systems

@aeligos 10 ай бұрын

What’s the best way to become an ethical hacker? I have no IT background.

@myalterego2878 7 ай бұрын

I'm at if nothing on the internet can be trusted, I'm currently using a disposable phone anyway.

@alienkeric617 10 ай бұрын

is this live ?

@ghostgirl4221 10 ай бұрын

Shell code made in programmer heaven

@user-bg1xh3yl5o 10 ай бұрын

what is he using for the terminal autofill?

@sreejishnair5922 10 ай бұрын

To be honest a bit costly if you see the life time plan if compared with TCM Malware analysis course... Not complaining about the course content.

@viperjay1 10 ай бұрын

John that service is over $200 dollars! I still am looking for work since Aug. 02.

@bhagyalakshmi1053 10 ай бұрын

More explain Bing Medal How to time job joining

@the-matrix-has-you 9 ай бұрын

Seeing from the comments I can see anybody has no idea how to evade anti viruses really. So here is a hint Obfuscation is the key... we encrypt the strings compress them... And Change methods name into random string arrays, adding dummy codes, masking data... etc. Thats the most basic. The advanced obfuscation requires subjects like anti debug and anti tampering the most important of all inventing your own compression algorithms...

@troysmith9652 10 ай бұрын

You against the Chinese. Need you 😊

@bhagyalakshmi1053 10 ай бұрын

Modern technology of Nobita, bit understanding

@user-by5ll6cw8v 10 ай бұрын

How are you guys able to subscribe to academies like maldev

@thatsal327 10 ай бұрын

is it better to buy the course of sektor7 or maldev (or both)?

@SuperhumanFitness 6 ай бұрын

So would this be a Trojan?

@auro1986 10 ай бұрын

how many will learn to make malware for your computer?

@MrGencyExit64 10 ай бұрын

lol, I don't know why but hearing anyone talk about this stuff (MalDev) enthusiastically from _this_ perspective is funny to me. I've learned all those things over the years for completely different reasons, in modifying games I encounter lots of stupid anti-debug tricks and have to learn the same craft as malware authors to circumvent the anti-debug surrounding a lot of games DRM. I don't even have any interest in pirating games, but that shit gets in the way 😕

@amirbozorgmehrian8373 10 ай бұрын

I feel like my fbi agent is watching me since the moment I clicked this video😂😂

@neilfpv 10 ай бұрын

Are most malwares made for Windows environment?

@bakeery 10 ай бұрын

Yes

@ayyleeuz4892 10 ай бұрын

windows is most popular and least secure so yes

@cmkarlav855 10 ай бұрын

This is a cool video and nice to see, but I'd much rather it have been done in C or C++

@cot3chcot3ch96 10 ай бұрын

can i see the initial script to see the code

@Alisdair67 9 ай бұрын

❤

@davidblaske6911 10 ай бұрын

Oh the auto immune disease we call hacker

@artywatts4892 10 ай бұрын

love the idea of maldevacademy, but starting at 250$ is a bit XD

@rty1955 9 ай бұрын

Dude, how much coffee do you drink???

@gwnbw 10 ай бұрын

Used to make malware like this in 3 seconds with scripts lol, wonder if its still possible

@snehbavarva8383 10 ай бұрын

What? How? I am thinking to make a malware which will store at code cave of PE file and i want a shell from that victim pc How can I do that?

@ayyleeuz4892 10 ай бұрын

@@snehbavarva8383if you can do it you won't be asking here, so you're a long way off and so you're asking inappropriate questions for your position

@snehbavarva8383 10 ай бұрын

@@ayyleeuz4892 that’s why I’m asking. I had started my new journey with maldev about 3-4 days ago and i want to learn that’s why I’m asking

@snehbavarva8383 10 ай бұрын

@@ayyleeuz4892 I know how to put malicious code at code cave of the PE files but what after that? I want to learn, can you suggest me some good resources?

@geckwwo 10 ай бұрын

@@snehbavarva8383I may suggest you to just stop writing malware - it will get you in a lot of trouble (and it got me too), but if you still want to - just don't talk about it on internet

@halilherakim2266 2 ай бұрын

Can some one teach me how to make a malware or how can I put the code of the malware

@ghostgirl4221 10 ай бұрын

I don't have visual studio I run Linux as main.

@user-uh6tv3yv2n 6 ай бұрын

I have one question Why Nim ? Does this language have any special qualities ?

@terror403 4 ай бұрын

If this is allowed here, it's bc newest antimalware solution can detect it.

@sowchbul8336 9 ай бұрын

Account recovery in general seems like a mole to *eagle spy recovery page* and his consistency is quite good either way. Although this video was helpful.

@asem222kha9 9 ай бұрын

Am I trippin' or Qojqva turns into hacking stuff!!

@ngudududlamini252 10 ай бұрын

Thank you Seth Rogan

@AntoineVanGeyseghem 10 ай бұрын

FR: Bonjour... oui... la police... c'est pour signaler un homme ! Qu'a-t-il fait ? C'est un hacker ! 0_ 0 EN: Hello... yes... police... this is to report a man ! What did he do ? It's a hacker ! 0_ 0