#Hexorcist - The Black Magic of Reverse Engineering to become a Malware Hexorcist 8GB

[4.0K]  .
├── [3.4K]  1. The Rookie HEXORCIST Corner
│   ├── [ 22M]  VIDEO Crackme 1 - Your first spell.mp4
│   ├── [ 32M]  VIDEO Crackme 2 - A Simple Serial Check With Static Analysis.mp4
│   ├── [ 51K]  crackme1.5_practice.zip
│   ├── [ 50K]  crackme1.zip
│   ├── [ 51K]  crackme2.5_practice.zip
│   └── [ 50K]  crackme2.zip
├── [3.4K]  10. Unpacking Malicious Packers
│   ├── [ 65M]  VIDEO Turbo Unpacking Hexorcism of malicious packer gpcode unpacking.mp4
│   ├── [167M]  VIDEO Unpacking Kronos NTCRYPT Second Stage Loader.mp4
│   ├── [123M]  VIDEO Unpacking Malicious Packer Red October Module.mp4
│   ├── [106M]  VIDEO Unpacking NTCRYPT GrandCrab Ransomware.mp4
│   ├── [ 29K]  gpcode.zip
│   ├── [241K]  ntcrypt_grandcrab.zip
│   ├── [565K]  ntcrypt_second_stage_kronos.zip
│   └── [571K]  red_module.zip
├── [3.4K]  11. CASE STUDY Crypto Analysis of Paradise Ransomware
│   ├── [ 36M]  VIDEO BONUS IDA Python script to locate encrypted blob.mp4
│   ├── [334M]  VIDEO Paradise Ransomware Static Analysis Crypto Identification.mp4
│   ├── [ 57M]  VIDEO Unpacking the Paradise Ransomware.mp4
│   ├── [ 862]  crypto_example_2.zip
│   ├── [ 162]  desktop.ini
│   ├── [2.2K]  enum_language_header.zip
│   ├── [ 881]  finding_encrypted_blob.zip
│   └── [ 63K]  paradise.sample.zip
├── [3.4K]  12. Crypto Reverse Engineering RSA
│   ├── [ 197]  RSATool2v17.txt
│   ├── [ 56K]  RSATool2v17.zip
│   ├── [216M]  VIDEO RSA Crypto Crackme.mp4
│   ├── [213K]  empty_template_and_full_RSA_keygen.zip
│   └── [ 53K]  rsa_crackme.zip
├── [3.4K]  13. Crypto Reverse Engineering RSA Part 2 Vulnerabilities
│   ├── [ 39K]  Amenesia_RSA_1024_wiener.zip
│   ├── [ 33K]  RSA_de_weger.zip
│   ├── [114K]  RSA_keygen_small_primes.zip
│   ├── [ 43M]  VIDEO RSA 1024 bit Crypto Crackme Close Primes Attack.mp4
│   ├── [ 70M]  VIDEO RSA 1024 bit Crypto Crackme RSA Attacks.mp4
│   ├── [247K]  files_python_attack_scripts_keygen_source_fasm.zip
│   └── [542K]  miracl-manual.pdf
├── [3.4K]  14. IDA Python + IDA Pro Debugger
│   ├── [363M]  VIDEO IDA Python Breakpoints Appcall for malware analysis.mp4
│   ├── [ 150]  desktop.ini
│   ├── [ 47K]  samples_ida_python_debugger_lesson.zip
│   └── [1.6K]  scripts_ida_debugger_lesson.zip
├── [3.4K]  15. APT Reverse Engineering Cloud Atlas
│   ├── [ 84M]  VIDEO PART 1 Cloud Atlas Spearphishing Finding the Shellcode.mp4
│   ├── [174M]  VIDEO PART 2 Reverse Engineering the Shellcode.mp4
│   ├── [ 24M]  VIDEO PART 3 Extracting payload from VBS file.mp4
│   └── [2.1M]  cloudatlas.zip
├── [3.4K]  16.APT Reverse Engineering Cloud Atlas 2
│   ├── [ 66M]  VIDEO BONUS PE Loader Finder Python Script.mp4
│   ├── [128M]  VIDEO PART 4 Unpacking ctfmon and redtailed.mp4
│   ├── [319M]  VIDEO PART 5 Analysis of Unpacked Payload.mp4
│   ├── [ 120]  desktop.ini
│   └── [1.8K]  pe_parser_scanner_ida_python.zip
├── [3.4K]  17.Handling Import by Hash like a Pro
│   ├── [110M]  VIDEO Import By Hash Part 2 Kpot Infostealer.mp4
│   ├── [102M]  VIDEO Import by Hash Part 1 Shellcode Analysis.mp4
│   ├── [ 124]  desktop.ini
│   └── [ 21K]  import_by_hash_template_and_python_enum_generator.zip
├── [3.4K]  18.Net Traveller BackDoor Analysis
│   ├── [204M]  VIDEO Net Traveller BackDoor Analysis.mp4
│   ├── [ 50M]  VIDEO Net Traveller Coding your Payload.mp4
│   ├── [ 466]  exploit_template_for_nettraveller.zip
│   ├── [ 19K]  nettraveller_sample.zip
│   └── [2.3K]  nettravellers_scripts.zip
├── [3.4K]  19.MiniDuke APT Reverse Engineering Part 1
│   ├── [290M]  VIDEO MiniDuke APT Reverse Engineering Part 1.mp4
│   └── [ 12K]  miniduke.zip
├── [3.4K]  2. Static Analysis
│   ├── [ 53M]  VIDEO Crackme 3 - Part 1 Dealing with obfuscated api calls.mp4
│   ├── [ 58M]  VIDEO Crackme 3 - Part 2 Reversing the algorithm.mp4
│   ├── [ 92M]  VIDEO Crackme 4 - Solving automatically by brute forcing.mp4
│   ├── [ 51K]  crackme3.zip
│   ├── [ 51K]  crackme3_practice.zip
│   ├── [ 51K]  crackme4.zip
│   ├── [ 476]  crackme5.5.txt
│   ├── [ 51K]  crackme5.5.zip
│   ├── [ 198]  crackme5.txt
│   ├── [ 51K]  crackme5.zip
│   └── [ 152]  desktop.ini
├── [3.4K]  20.IDA Python Hexorcist Spell Book
│   ├── [ 81M]  VIDEO Hexorcist Spell Book 1.1 on nettraveller.mp4
│   ├── [156M]  VIDEO IDA Python Hexorcist Spell Book.mp4
│   ├── [7.5K]  hexorcist_spellbook.zip
│   └── [7.5K]  hsb11.zip
├── [3.4K]  21.Virtual Machine Internal Programming a VM Part 1
│   ├── [146M]  VIDEO Programming your own Virtual Machine Obfuscator Part 1.mp4
│   └── [ 82K]  VM_part_1_fasm_source_and_exercice.7z
├── [3.4K]  22.Virtual Machine Internal Programming a VM Part 2
│   ├── [191M]  VIDEO Programming your own Virtual Machine Obfuscator Part 2.mp4
│   └── [ 50K]  VM2_empty_template_fasm.zip
├── [3.4K]  23.Reverse Engineering Virtual Machine + Code Disassembler Part 1
│   └── [198M]  VIDEO Reverse Engineering VM2 + Coding a disassembler for it.mp4
├── [3.4K]  24.Reverse Engineering Virtual Machine + Code Disassembler Part 2
│   ├── [198M]  VIDEO Reverse Engineering VM3 Coding a disassembler for it.mp4
│   └── [1.4K]  VM3.zip
├── [3.4K]  25.Squirrel Waffle Reverse Engineering
│   ├── [ 85M]  VIDEO Reverse Engineering Squirrel Waffle Malicious Documents.mp4
│   ├── [247M]  VIDEO Unpacking Squirrel Waffle Loader Custom Packers.mp4
│   ├── [591K]  squirrel_waffle_malicious_documents.zip
│   └── [218K]  squirrelwaffler_loader_packed_dll_files.zip
├── [3.4K]  26.GuLoader Reverse Engineering
│   ├── [159M]  VIDEO Reverse Engineering the GuLoader Shellcode Based Loader.mp4
│   └── [ 17K]  guLoader.zip
├── [3.4K]  27.IDA Python Scripting Packer Helper Script Unpacking TA505 Custom Packer
│   ├── [168M]  VIDEO Unpacking TA505 Custom Packer.mp4
│   ├── [148M]  VIDEO Writing an IDA Python scripting to help finding interesting code in packers.mp4
│   ├── [371K]  ta505_samples.zip
│   └── [1.1K]  unpacking_helper.zip
├── [3.4K]  28.New Emotet 11 2021 Reverse Engineering VBA Obfuscation + Unpacking Emotet
│   ├── [ 62M]  VIDEO Unpacking Emotet nov 2021 Sample And Reversing Obfuscated Word Document.mp4
│   ├── [129K]  copy payment.zip
│   └── [180K]  emotet_sample.zip
├── [3.4K]  29.ANGR FRAMEWORK Symbolic Execution and SMT Solver
│   ├── [230M]  VIDEO ANGR FRAMEWORK Symbolic Execution and SMT solver.mp4
│   ├── [210K]  angr_Z3_exercises.zip
│   └── [3.5K]  angr_z3_python_scripts.zip
├── [3.4K]  3. DECRYPTING FILES - BRUTE FORCING + ASM TO DLL
│   ├── [ 622]  Crackme5.5_ida_python.zip
│   ├── [ 69M]  VIDEO Crackme 5 - Decrypting executables part 1.mp4
│   ├── [120M]  VIDEO Crackme 5.5 - Decrypting executables part 2.mp4
│   ├── [ 66M]  VIDEO OpenMP BruteForcer + DLL made from algorithms.mp4
│   ├── [1.2K]  bruteforcer_omp_full.txt
│   ├── [372K]  bruteforcer_omp_full.zip
│   └── [ 51K]  crackme6.zip
├── [3.4K]  30.ANGR FRAMEWORK Using Hooks and Making a code emulator
│   ├── [230M]  1. VIDEO ANGR FRAMEWORK Using Hooks.mp4
│   ├── [ 51K]  1. angr_crackme2.zip
│   ├── [134M]  2. VIDEO ANGR Making a Snipet Emulator + Deobfuscator.mp4
│   ├── [105K]  2. angr_crackme3_and_4.zip
│   └── [2.7K]  2. emulating_obfuscated_jumps_auto_cross_ref.zip
├── [3.4K]  31.ANGR and Deobfuscation Continued
│   ├── [ 72M]  1.VIDEO ANGR Inserting jumps and removing dead blocks in graph.mp4
│   ├── [ 62M]  2.VIDEO Using ANGR to Automatically Decrypt Strings in Malware.mp4
│   ├── [211M]  3.VIDEO Using ANGR to Automatically Decrypt Strings in Conti Ransomware.mp4
│   ├── [1.1K]  angr_string_decryption_course_script.zip
│   ├── [ 84K]  conti.zip
│   ├── [2.9K]  conti_decryptor_with_emulation.zip
│   ├── [1.2K]  files_call_graph_simplification.zip
│   └── [ 785]  string_encryption.zip
├── [3.4K]  4. Unpacking Part 1
│   ├── [ 272]  READ ME FIRST.txt
│   ├── [155M]  VIDEO Unpacking Lesson 1 - Many ways to find OEP IAT rebuilding and more.mp4
│   ├── [100M]  VIDEO Unpacking Lesson 2 - Introduction to x32dbg scripting.mp4
│   ├── [107M]  VIDEO Unpacking Lesson 3 - Hexorcist 1 Static Analysis Scripts.mp4
│   ├── [119M]  VIDEO Unpacking Lesson 4 - Unpackme 3a IAT Redirection.mp4
│   ├── [ 67M]  VIDEO Unpacking Lesson 5 - Unpackme 3b checksum IAT Redirection.mp4
│   ├── [ 43M]  VIDEO Unpacking PE Files - Theory.mp4
│   ├── [ 664]  hexorcist3a.zip
│   ├── [ 696]  hexorcist3b.zip
│   ├── [ 23K]  notepad_packed_hexorcist_pack_0.zip
│   ├── [ 24K]  notepad_packed_hexorcist_pack_1.zip
│   ├── [ 40K]  nspack.zip
│   ├── [1.2K]  unpacking_lesson3_files.zip
│   ├── [379K]  unpackme_3A.zip
│   ├── [379K]  unpackme_3B.zip
│   └── [ 39K]  upack_and_xdbg_scripts.zip
├── [3.4K]  5. Unpacking Part 2
│   ├── [155M]  VIDEO Unpackme 4 - Manually fixing nanomites part 1.mp4
│   ├── [ 29M]  VIDEO Unpackme 4 - Part 2 External nanomite fixer in assembly .mp4
│   ├── [114M]  VIDEO Using Cheat Engine VEH Debugger Hooking Engine to solve unpackme 3b.mp4
│   ├── [ 182]  desktop.ini
│   ├── [1.1M]  files_cheat_engine_lesson_with_hooks.zip
│   ├── [ 49K]  unpackme4.zip
│   ├── [105K]  unpackme4_part2_nanomitefixer_tool_and_script.zip
│   ├── [ 49K]  unpackme5.zip
│   ├── [102K]  unpackme6_cmd.zip
│   └── [1.9K]  unpackme_4_files.zip
├── [3.4K]  6. Unpacking Part 3 - IDA Processor Plugin to fix nanomites
│   ├── [ 214]  EXCERISE - Write an IDA processor plugin.txt
│   ├── [ 51K]  Processor Plugin Writting Training - obfuscation 1.zip
│   ├── [ 51K]  Processor Plugin Writting Training - obfuscation 2.zip
│   ├── [ 26M]  VIDEO  Unpackme 5 with IDA Processor Module.mp4
│   ├── [ 36M]  VIDEO IDA Processor Extension plugin part 1 unpackme 4.mp4
│   ├── [102M]  VIDEO Unpackme 5 - Nanomites with 2 emulated instructions.mp4
│   ├── [ 898]  ida75_processor_plugin_unpackme4.zip
│   ├── [1.5K]  ida_processor_module_unpackme5.zip
│   └── [ 54K]  unpackme5_script_and_nanofixer_source.zip
├── [3.4K]  7. Unobfuscation - Reconstruction x86 code
│   ├── [ 960]  Obfuscation 2 Plugin Source.zip
│   ├── [ 57M]  VIDEO Obfuscation 1 - Practice on Processor Plugin Dev.mp4
│   ├── [ 69M]  VIDEO Obfuscation 2 - Practice on Processor Plugin Dev.mp4
│   ├── [ 53M]  VIDEO UnObfuscating Crackme 3 API Calls with an IDA Processor Extension Plugin.mp4
│   ├── [150M]  VIDEO Unpackme 6 - 12 Nanomites handled by ida processor-module.mp4
│   ├── [1.8K]  crackme3_plugin_and_template_plugin.zip
│   ├── [ 144]  desktop.ini
│   ├── [341K]  files_unpackme_6_ida_plugin_nano_fixer_and_IDB.zip
│   └── [ 893]  obfuscator_1_ida_plugin.zip
├── [3.4K]  8. UnObfuscation - Crackme7 98% Emulated Instructions
│   ├── [154M]  VIDEO UnObfuscating Crackme 7 with an IDA processor extension plugin part 1.mp4
│   ├── [101M]  VIDEO UnObfuscating Crackme 7 with an IDA processor extension plugin part 2.mp4
│   ├── [ 52K]  crackme7.zip
│   ├── [ 186]  desktop.ini
│   ├── [1.3K]  plugin_crackme7_part1.zip
│   └── [1.8K]  plugin_crackme7_part2.zip
├── [3.4K]  9. IDA Python Automating Work On Disassembly
│   ├── [ 86M]  VIDEO IDA Python How to work on disassembly and functions.mp4
│   ├── [116M]  VIDEO IDA Python PART 2 How to work on disassembly and functions.mp4
│   ├── [3.4K]  ida_python_2_scripts.zip
│   └── [ 635]  notes.txt
└── [   0]  list.txt

32 directories, 171 files