CyberCode Academy

This episode provides a complete, step-by-step guide to building a practical virtual sandbox using VirtualBox or VMware. The goal is to create isolated and reliable Windows and Linux environments that can be used for software development, testing, and server-side application work.1. Preparing the Virtualization EnvironmentThe episode begins by covering the essential software and installation media...

This module provides a hands-on exploration of mobile malware analysis through two distinct case studies, one for iOS and one for Android, designed to let you work independently to uncover the functionality of malicious programs. The episode is structured into the following key components: 1. iOS Case Study: Corporate Security Assessment The first scenario involves a corporate iPhone reported for...

This episode provides a comprehensive guide to designing and equipping a professional mobile malware analysis lab, with a focus on building a secure, repeatable, and well-instrumented environment for both iOS and Android research.1. Lab Design and InfrastructureThe episode begins by emphasizing that a professional malware lab requires more than simply running a few virtual machines. Researchers mu...

This episode focuses on designing a professional, scalable, and repeatable mobile malware analysis laboratory, moving beyond a simple virtual-machine setup toward an environment suitable for long-term security research.1. Strategic Lab PlanningBefore building the lab, analysts should define its purpose and scope: Determine whether the environment will be air-gapped, isolated, or internet-connected...

This episode covers dynamic analysis of Android applications, with a strong emphasis on runtime interaction, monitoring, and debugging.1. Android Dynamic Analysis with DrozerThe episode introduces Drozer, an Android security assessment framework that allows researchers to interact with application components while they are running. Key capabilities include: Establishing communication between the a...

Dynamic Mobile Malware Analysis — iOS and AndroidThis episode expands dynamic malware analysis beyond basic runtime observation and introduces process instrumentation, debugging, network capture, and automated mobile-security frameworks across both iOS and Android. The central idea is:Static analysis tells you what a sample may be capable of; dynamic analysis shows what it actually does when execu...

Dynamic iOS Malware Analysis — Key Takeaways Application Entry Point The standard entry point for an iOS application is UIApplicationMain. It initializes the application runtime and connects the application to its App Delegate, which manages important lifecycle events. Method Swizzling Method swizzling allows an analyst to intercept or replace a class method at runtime. In a controlled malware-ana...

Mobile Malware Static Analysis — Module ConclusionThis episode serves as a knowledge check and consolidation of the basic static-analysis methodology covered across both iOS and Android. The emphasis is not on learning one particular tool, but on developing a repeatable investigation process.1. iOS Static AnalysisSeveral important tools and artifacts are reinforced.class-dumpUsed primarily to extr...

Android Basic Static Analysis — Advanced Study GuideThis episode demonstrates how to perform basic static analysis of Android applications, moving from initial malware triage to manifest analysis, code decompilation, and identification of suspicious functionality.1. Android Malware Analysis MethodologyAlthough Android and iOS have very different architectures, the fundamental malware-analysis meth...

iOS Basic Static Analysis — Advanced Study GuideThis episode moves from the fundamentals of iOS malware analysis into hands-on static binary analysis, demonstrating how command-line utilities and reverse-engineering tools can reveal valuable information without executing the malware.1. otool — Inspecting Mach-O Binariesotool is one of the most useful command-line utilities for examining Apple Mach...

iOS Malware Analysis — Key TakeawaysThis episode introduces the fundamentals of iOS malware analysis, combining the historical evolution of mobile threats with the methodology used by security researchers to investigate them.1. Understanding Mobile MalwareMobile malware is malicious software designed to disrupt devices, steal information, gain unauthorized access, or perform malicious actions. Com...

Android Security & APK Architecture — Advanced Study Template1. Android Security ModelAndroid security is built around several fundamental objectives: - Protecting user and application data - Isolating applications from one another - Controlling privileges - Providing secure inter-process communication - Restricting unauthorized access to system resources The architecture combines traditional...

A comprehensive technical exploration of the foundational architectures and security models of iOS and Android, providing the essential knowledge required for mobile security analysis and malware research. The journey begins with iOS security, examining its three major pillars: system security, data security, and application security. You will learn how iOS applications operate within the Cocoa To...

iOS Application Architecture & Jailbreaking — Advanced Study Template1. iOS Application ArchitectureiOS applications are primarily developed using: Swift Objective-C Xcode as the main development environment After compilation, an application is packaged into an IPA (iOS App Store Package).An IPA is essentially an archive containing the components required to install and execute the application...

iOS Architecture & Security — Study Template1. iOS Architecture OverviewThe iOS platform can be understood as a layered architecture in which higher-level frameworks rely on increasingly fundamental system services.┌─────────────────────────────┐ │ Cocoa Touch │ ├─────────────────────────────┤ │ Core Media │ ├─────────────────────────────┤ │ Core Services │ ├─────────────────────────────┤ │ Co...

Mobile Malware Analysis — Foundational Study Template1. Course ObjectiveThis module introduces the fundamentals of mobile malware analysis for both: Android iOS The course is designed to build the knowledge required to investigate malicious mobile applications, understand their behavior, and identify security risks.2. Technical PrerequisitesBefore beginning mobile malware analysis, you should have...

🧠 Live Memory Forensics Lab — Mandiant Redline (Full Workflow)🎯 Lab ObjectivePerform a real-world memory forensic investigation on an infected Windows VM using Mandiant Redline, covering:Infection → Data Collection → Transfer → Analysis → IOC Identification🧪 Lab OverviewEnvironment: Target: Windows 7 Virtual Machine (infected) Malware Sample: her.exe (Dyre/Dridex family behavior) Tool: Mandiant...

🧠 Live Memory Forensics with Mandiant Redline — Study Template🔐 Core ConceptMandiant Redline is not just a memory capture tool — it performs a:Memory audit for rapid threat detection and triageUnlike basic tools: It analyzes live system state Identifies Indicators of Compromise (IOCs) Detects stealthy malware that bypasses normal APIs ⚡ Why Redline Is PowerfulTraditional tools: Only dump memory...

🧠 Memory Analysis & Incident Response — Advanced Template🔐 Core ConceptMemory analysis is a high-impact forensic technique used during incident response to uncover evidence that is not available through disk or antivirus analysis. Key idea: Critical attack artifacts often exist only in volatile memory⚡ Why Memory Analysis Is CriticalTraditional methods may fail: Antivirus → may not detect a...

🧠 Memory Analysis (RAM Forensics) — Study Template🔐 Core ConceptMemory analysis is a critical part of the incident response process, used to detect threats that do not leave artifacts on disk. Key idea: Some attacks exist only in memory⚡ Why Memory Forensics MattersModern threats bypass traditional disk-based detection: Fileless malware Executes directly in RAM Leaves no files behind Malicious...

This episode is about a very specific but powerful capability in scraping:automating file uploads as part of a web interaction workflowIt sits at the intersection of browser automation + data extraction pipelines.📤 Core IdeaSome websites don’t just serve data — they require you to: upload a file trigger processing then return results So scraping becomes:“submit file → wait for processing → extrac...

This episode is essentially about turning “login-protected websites” into programmable sessions and then controlling full form workflows like a real user.🔐 Core IdeaModern scraping stops being “download HTML” and becomes:“Authenticate → maintain session → interact → extract”This is the foundation of scraping anything behind a login wall.🍪 1. Session Cookies (Staying Logged In)🧠 What they are: S...

This episode is essentially teaching you how to reverse-engineer web forms into programmatic HTTP requests, which is one of the most important skills in practical scraping.🧭 Core IdeaWeb forms are just structured HTTP requests. So instead of thinking:“I’m filling a form”You should think:“I’m constructing a GET or POST request that mimics what the browser sends”🌐 1. GET Forms (Simple & Scrape...

This episode is essentially about moving from “simple scraping” → “interactive web automation + session-aware extraction”, where websites behave more like applications than static pages.🧠 Core Idea of the CourseStandard scraping fails when websites: require login depend on session state (cookies) use forms instead of URLs rely on user interaction (buttons, uploads, checkboxes) So the goal becomes...

This module is essentially the “real world survival guide” for web scraping — it moves away from pure tooling and focuses on what actually breaks scrapers in production and how to behave responsibly while scraping at scale.🚧 1. Real-World Scraping ProblemsModern websites actively defend themselves against automation, so scraping is rarely “just code and go”.🚫 Bot RestrictionsWebsites may block a...