Start free

Browse › Python for Hacking & Offensive Security

Windows Rootkits With Python

Part of Python for Hacking & Offensive Security Topic: Programming

Counts towardsCompTIA PenTest+ badge

Access

Included in StationX Membership — unlimited attempts

🔒 StationX Membership — $299 / year ($24.92/mo billed annually)

Already have access? Sign in.

New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.

What you'll do

In this lab, we will use the Pywin32 extensions and the Deviare library to hook into functions and interact with the internal data structures.

  • The Deviare library is a bit limited in terms of it capabilities as a rootkit, mainly since that is not what it was designed to do.
  • However, it will be enough for our purposes and will enable us to more simply create a rootkit that uses a covert channel to exfiltrate data.

Roadmaps that use this lab