Rootkits Courses and Certifications

Linux Rootkits for Red-Blue Teams

Linux dominates the Server, Embedded, and now the Internet of Things (IoT) device market. In recent times, embedded systems and IoT devices, in particular, have been the weapons of choice in online at

• INE
• 4 hours
• Self-Paced
• Paid Course

Linode

Linux Defense Evasion - Linux Rootkits - Red Team Series

A hands-on demonstration of hiding an Apache-based Linux backdoor through a rootkit, command injection, and a Meterpreter reverse shell.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

HackMiami

Breaching the Depths of the Abyss: Exposing Rootkits - Track 2, Session 4

Dive deep into rootkits: explore their inner workings, detection techniques, and countermeasures. Learn to identify and neutralize these stealthy threats using advanced tools like Living Off The Land Drivers.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

DEFCONConference

Infecting the Boot to Own the Kernel - UEFI Bootkits and Kernel-mode Rootkits

Explore UEFI bootkits and kernel rootkits construction, examining modular design, boot chain hooking, and advanced stealth capabilities with a complete framework for testing defenses.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

HackerSploit

Linux Defense Evasion - Apache2 Rootkit

Demonstrates how an Apache2 rootkit establishes persistence and evades defenses on Linux.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

x33fcon

Kernel Games: The Ballad of Offense and Defense in Rootkit Methodologies

Dive into advanced kernel rootkit techniques for red team operations and defense strategies, covering stealthy persistence, EDR evasion, and practical detection methods with hands-on demos.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Black Hat

Demystifying Modern Windows Rootkits

A hands-on walkthrough of building a Windows kernel rootkit, including driver loading, network-stack hooking, command execution, and stealth techniques.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Black Hat

Demigod - The Art of Emulating Kernel Rootkits

Explores emulating kernel rootkits to enable dynamic analysis at the operating-system level.

• YouTube
• 1 hour 9 minutes
• Self-Paced
• Conference Talk

Black Hat

Decade of the RATs – Custom Chinese Linux Rootkits for Everyone

A detailed account of a decade-long state-sponsored espionage campaign using handcrafted Linux malware, including kernel rootkits and an attacker control panel.

• YouTube
• 36 minutes
• Self-Paced
• Conference Talk

Black Hat

The UEFI Firmware Rootkits - Myths and Reality

Examines whether disclosed UEFI vulnerabilities can be used to build real-world firmware rootkits.

• YouTube
• 58 minutes
• Self-Paced
• Conference Talk

RSA Conference

Android Rootkits - Analysis from Userland and Kernelland

Analyzing Android rootkits with live memory forensics, dynamic binary instrumentation, and applied machine learning to generate actionable threat intelligence.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

Black Hat

Close Encounters of the Advanced Persistent Kind - Leveraging Rootkits for Post-Exploitation

Explore advanced Windows kernel post-exploitation techniques, including 0-day vulnerability exploitation, DKOM for altering OS telemetry, and NDIS modules for disrupting EDR cloud telemetry and establishing covert persistence.

• YouTube
• 38 minutes
• Self-Paced
• Conference Talk

Advanced Cybersecurity Topics

Attack and defend systems at the deepest level: rootkits and kernel hooking, buffer overflows, race conditions, ROP, and privilege escalation mapped to MITRE ATT&CK.

• Coursera
• 6 weeks, 8 hours a week
• Self-Paced
• Paid Course

BSidesCharm

Detecting and Triaging Modern Windows Rootkits

Discover modern Windows rootkit detection techniques, memory forensics, and event log analysis methods to combat evolving kernel-level malware threats in Windows 10 and beyond.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

Cooper

In-Depth Study of Linux Rootkits: Evolution, Detection, and Defense

Dive into Linux rootkit security, exploring their evolution, detection methods, and defensive strategies for protecting systems against sophisticated kernel-level threats.

• YouTube
• 29 minutes
• Self-Paced
• Free Video