Expanded to cover malware development across Windows and Linux, persistence, injection, evasion, and malware analysis, this practical, lab-based guide uses real-world examples to equip ethical hackers with hands-on skills.
Key Features:
- Build practical malware PoCs using C/C++ and Assembly in controlled labs
- Apply red and blue team perspectives to understand malware behavior, detection opportunities, and forensic artifacts
- Explore execution, injection, persistence, evasion, and anti-analysis techniques
- Purchase of the print or Kindle book includes a free PDF eBook
Book Description:
Malware Development for Ethical Hackers, Second Edition is a practical guide to understanding how modern malware works across Windows and Linux in an ethical, research-driven context. It focuses on controlled proof-of-concept development, showing how adversaries build capabilities such as droppers, keyloggers, infostealers, loaders, persistence modules, and process injection techniques.
The second edition covers malware development for Windows and Linux, with hands-on examples in C/C++ and Assembly. You'll explore execution techniques, evasion, persistence, anti-analysis, abuse of legitimate APIs, low-level system techniques, and real-world tradecraft inspired by modern APTs and malware families. The book also connects offensive development with malware analysis, detection opportunities, and forensic artifacts for security researchers and Blue Team readers.
By the end of this book, you'll understand how malware is designed, executed, hidden, persisted, and analyzed across Windows and Linux. You'll be able to build safe lab PoCs, understand adversary behavior, recognize forensic artifacts, and apply this knowledge to ethical hacking, red team simulations, malware research, and practical defense.
What You Will Learn:
- Implement execution and injection techniques across Windows and Linux
- Explore persistence mechanisms and the artifacts they leave behind
- Develop practical PoCs for droppers, keyloggers, infostealers, and loaders
- Study evasion, anti-analysis, and living-off-the-land techniques to understand how malware avoids detection
- Reconstruct real-world adversary tradecraft for red team simulations, security research, and defensive improvement
Who this book is for:
This book is for penetration testers, red team engineers, malware researchers, exploit developers, threat hunters, and blue team analysts who want to understand how real-world malware techniques work in practice. It is also useful for ethical hackers and cybersecurity students seeking hands-on experience with malware concepts across Windows, Linux, macOS, Android, and iOS in controlled lab environments. Familiarity with C/C++, basic Assembly, operating system internals, and core cybersecurity concepts will help readers get the most from the examples.
Table of Contents
- Malware Families and Capabilities for Windows
- Exploring Malware Running Techniques for Windows
- Windows Malware Persistence Mechanisms
- Bypass Windows OS Security and Cat and Mouse Game for Windows
- Linux Malware Capabilities
- Exploring Malware Running Techniques for Linux
- Linux Malware Persistence Mechanisms
Zhussupov, Zhassulan: - Zhassulan Zhussupov is a software engineer, cybersecurity researcher, author, and international speaker with more than a decade of experience building technology solutions for homeland security. Specializing in malware analysis, threat hunting, offensive security, and cybersecurity platform development, he has contributed to projects and research initiatives across Kazakhstan, Europe, the Middle East, and the United States. He also contributes to Malpedia, a collaborative knowledge base for malware research and threat intelligence. His publications include Malware Development for Ethical Hackers, published by Packt in 2024, as well as the independent e-books MD MZ Malware Development and Malwild: Malware in the Wild. In addition, he has written and co-authored numerous technical articles on malware development, reverse engineering, threat research, and offensive cybersecurity. Zhassulan regularly shares his research with the international cybersecurity community and has spoken at conferences and events including Black Hat, DEF CON, Security BSides, hack.lu, PH Talks, and the Arab Security Conference. Outside his professional work, he is a devoted husband and father who values family, continuous learning, and the practical exchange of knowledge within the global cybersecurity community.
