CyberCode Academy

Dynamic iOS Malware Analysis — Key Takeaways Application Entry Point The standard entry point for an iOS application is UIApplicationMain. It initializes the application runtime and connects the application to its App Delegate, which manages important lifecycle events. Method Swizzling Method swizzling allows an analyst to intercept or replace a class method at runtime. In a controlled malware-ana...

Mobile Malware Static Analysis — Module ConclusionThis episode serves as a knowledge check and consolidation of the basic static-analysis methodology covered across both iOS and Android. The emphasis is not on learning one particular tool, but on developing a repeatable investigation process.1. iOS Static AnalysisSeveral important tools and artifacts are reinforced.class-dumpUsed primarily to extr...

Android Basic Static Analysis — Advanced Study GuideThis episode demonstrates how to perform basic static analysis of Android applications, moving from initial malware triage to manifest analysis, code decompilation, and identification of suspicious functionality.1. Android Malware Analysis MethodologyAlthough Android and iOS have very different architectures, the fundamental malware-analysis meth...

iOS Basic Static Analysis — Advanced Study GuideThis episode moves from the fundamentals of iOS malware analysis into hands-on static binary analysis, demonstrating how command-line utilities and reverse-engineering tools can reveal valuable information without executing the malware.1. otool — Inspecting Mach-O Binariesotool is one of the most useful command-line utilities for examining Apple Mach...

iOS Malware Analysis — Key TakeawaysThis episode introduces the fundamentals of iOS malware analysis, combining the historical evolution of mobile threats with the methodology used by security researchers to investigate them.1. Understanding Mobile MalwareMobile malware is malicious software designed to disrupt devices, steal information, gain unauthorized access, or perform malicious actions. Com...

Android Security & APK Architecture — Advanced Study Template1. Android Security ModelAndroid security is built around several fundamental objectives: - Protecting user and application data - Isolating applications from one another - Controlling privileges - Providing secure inter-process communication - Restricting unauthorized access to system resources The architecture combines traditional...

A comprehensive technical exploration of the foundational architectures and security models of iOS and Android, providing the essential knowledge required for mobile security analysis and malware research. The journey begins with iOS security, examining its three major pillars: system security, data security, and application security. You will learn how iOS applications operate within the Cocoa To...

iOS Application Architecture & Jailbreaking — Advanced Study Template1. iOS Application ArchitectureiOS applications are primarily developed using: Swift Objective-C Xcode as the main development environment After compilation, an application is packaged into an IPA (iOS App Store Package).An IPA is essentially an archive containing the components required to install and execute the application...

iOS Architecture & Security — Study Template1. iOS Architecture OverviewThe iOS platform can be understood as a layered architecture in which higher-level frameworks rely on increasingly fundamental system services.┌─────────────────────────────┐ │ Cocoa Touch │ ├─────────────────────────────┤ │ Core Media │ ├─────────────────────────────┤ │ Core Services │ ├─────────────────────────────┤ │ Co...

Mobile Malware Analysis — Foundational Study Template1. Course ObjectiveThis module introduces the fundamentals of mobile malware analysis for both: Android iOS The course is designed to build the knowledge required to investigate malicious mobile applications, understand their behavior, and identify security risks.2. Technical PrerequisitesBefore beginning mobile malware analysis, you should have...

🧠 Live Memory Forensics Lab — Mandiant Redline (Full Workflow)🎯 Lab ObjectivePerform a real-world memory forensic investigation on an infected Windows VM using Mandiant Redline, covering:Infection → Data Collection → Transfer → Analysis → IOC Identification🧪 Lab OverviewEnvironment: Target: Windows 7 Virtual Machine (infected) Malware Sample: her.exe (Dyre/Dridex family behavior) Tool: Mandiant...

🧠 Live Memory Forensics with Mandiant Redline — Study Template🔐 Core ConceptMandiant Redline is not just a memory capture tool — it performs a:Memory audit for rapid threat detection and triageUnlike basic tools: It analyzes live system state Identifies Indicators of Compromise (IOCs) Detects stealthy malware that bypasses normal APIs ⚡ Why Redline Is PowerfulTraditional tools: Only dump memory...

🧠 Memory Analysis & Incident Response — Advanced Template🔐 Core ConceptMemory analysis is a high-impact forensic technique used during incident response to uncover evidence that is not available through disk or antivirus analysis. Key idea: Critical attack artifacts often exist only in volatile memory⚡ Why Memory Analysis Is CriticalTraditional methods may fail: Antivirus → may not detect a...

🧠 Memory Analysis (RAM Forensics) — Study Template🔐 Core ConceptMemory analysis is a critical part of the incident response process, used to detect threats that do not leave artifacts on disk. Key idea: Some attacks exist only in memory⚡ Why Memory Forensics MattersModern threats bypass traditional disk-based detection: Fileless malware Executes directly in RAM Leaves no files behind Malicious...

This episode is about a very specific but powerful capability in scraping:automating file uploads as part of a web interaction workflowIt sits at the intersection of browser automation + data extraction pipelines.📤 Core IdeaSome websites don’t just serve data — they require you to: upload a file trigger processing then return results So scraping becomes:“submit file → wait for processing → extrac...

This episode is essentially about turning “login-protected websites” into programmable sessions and then controlling full form workflows like a real user.🔐 Core IdeaModern scraping stops being “download HTML” and becomes:“Authenticate → maintain session → interact → extract”This is the foundation of scraping anything behind a login wall.🍪 1. Session Cookies (Staying Logged In)🧠 What they are: S...

This episode is essentially teaching you how to reverse-engineer web forms into programmatic HTTP requests, which is one of the most important skills in practical scraping.🧭 Core IdeaWeb forms are just structured HTTP requests. So instead of thinking:“I’m filling a form”You should think:“I’m constructing a GET or POST request that mimics what the browser sends”🌐 1. GET Forms (Simple & Scrape...

This episode is essentially about moving from “simple scraping” → “interactive web automation + session-aware extraction”, where websites behave more like applications than static pages.🧠 Core Idea of the CourseStandard scraping fails when websites: require login depend on session state (cookies) use forms instead of URLs rely on user interaction (buttons, uploads, checkboxes) So the goal becomes...

This module is essentially the “real world survival guide” for web scraping — it moves away from pure tooling and focuses on what actually breaks scrapers in production and how to behave responsibly while scraping at scale.🚧 1. Real-World Scraping ProblemsModern websites actively defend themselves against automation, so scraping is rarely “just code and go”.🚫 Bot RestrictionsWebsites may block a...

This episode is a practical end-to-end example of the Selenium + Beautiful Soup hybrid scraping pattern, applied to a real sports data use case (Premier League player pages).⚽ Goal of the ProjectScrape structured data about Wayne Rooney from a dynamic football website, including: News headlines Career statistics Player profile information This is a classic case where: Content is JavaScript-render...

This episode is basically about building a hybrid scraping pipeline where each tool does what it’s best at instead of forcing one tool to do everything.🧩 Core Idea: Split the Problem in TwoModern scraping usually has two phases: Browser simulation (Selenium) HTML parsing (Beautiful Soup) The key insight:Selenium is for interacting with the page, not for extracting data at scale.🧠 1. Beautiful So...

This tutorial series is basically showing how Selenium moves from “clicking elements” into real-world browser automation, where pages are messy, slow, and full of UI traps.🧭 1. Core Setup + Basic NavigationEverything starts with controlling the browser: ChromeDriver setup Acts as the bridge between Python and Chrome driver.get(url) Opens a webpage inside the automated browser session Once the pag...

This module is basically about the core skill in Selenium automation: reliably finding the right element on a page that keeps changing.🧩 What “locating elements” really meansIn Selenium, everything you interact with is a web element, such as: buttons input fields links images hidden UI components used by JavaScript Modern web apps are often dynamic, meaning: IDs change on every refresh classes ar...

This episode focuses on how Selenium WebDriver actually works under the hood, and then walks into the practical setup and first automation steps.🧠 Selenium WebDriver ArchitectureSelenium WebDriver is designed to control browsers as realistically as possible, which is why it uses a multi-layer architecture instead of direct code-to-browser control.🧩 1. Language BindingsThese are client libraries...

This episode is essentially a setup guide for moving from simple HTTP-based scraping to full browser automation using Selenium, especially for websites where content is rendered or modified by JavaScript.🌐 Web Scraping vs Dynamic Web Pages🧾 What “web scraping” means hereWeb scraping is framed as:Converting web page content into structured data for analysisBut the key challenge is that not all co...