--- title: "It's Good To Be Bad - Understanding Offensive C++ Programming Techniques For Secure Software" url: https://daily.dev/posts/it-s-good-to-be-bad---understanding-offensive-c-programming-techniques-for-secure-software-r8iilcuau source_url: https://www.youtube.com/watch?v=Jyh70MnWzmE type: video:youtube source: "C++Online" published: 2026-07-05T07:25:39.500Z updated: 2026-07-05T07:26:08.830Z tags: ["c++", "reverse-engineering"] reading_time: 54 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # It's Good To Be Bad - Understanding Offensive C++ Programming Techniques For Secure Software **[C\+\+Online](https://daily.dev/sources/cpponline)** · 54 min read · 0 upvotes · 0 comments ## Summary A conference talk exploring how modern C++ features (C++17/20/23) are used by malware developers to evade antivirus and EDR detection. Topics covered include compile-time string encryption using constexpr, polymorphic code generation via templates and macros to produce unique binary hashes, dynamic API resolution at runtime, hiding execution flow using virtual tables and std::any, RAII/smart pointer abuse for obfuscated shellcode execution, and fetching encrypted shellcode from external files. Live demos show bypassing Microsoft Defender using these techniques with Metasploit-generated payloads. The talk also briefly covers blue team countermeasures such as kernel callbacks, memory scanning, and behavior analysis. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#c++](https://daily.dev/tags/c++), [#reverse-engineering](https://daily.dev/tags/reverse-engineering) [View this post on daily.dev](https://daily.dev/posts/it-s-good-to-be-bad---understanding-offensive-c-programming-techniques-for-secure-software-r8iilcuau)