All Projects → En14c → Pivirus

En14c / Pivirus

sample linux x86_64 ELF virus

Programming Languages

c
50402 projects - #5 most used programming language
assembly
5116 projects

Projects that are alternatives of or similar to Pivirus

Mandibule
linux elf injector for x86 x86_64 arm arm64
Stars: ✭ 171 (+280%)
Mutual labels:  x86-64, elf
Fe2O3
Simple prepender virus written in Rust
Stars: ✭ 84 (+86.67%)
Mutual labels:  virus, elf
Holodec
Decompiler for x86 and x86-64 ELF binaries
Stars: ✭ 195 (+333.33%)
Mutual labels:  x86-64, elf
Rop Tool
A tool to help you write binary exploits
Stars: ✭ 590 (+1211.11%)
Mutual labels:  x86-64, elf
Userlandexec
userland exec for Linux x86_64
Stars: ✭ 23 (-48.89%)
Mutual labels:  x86-64, elf
Fcd
An optimizing decompiler
Stars: ✭ 622 (+1282.22%)
Mutual labels:  x86-64, elf
Rappel
A linux-based assembly REPL for x86, amd64, armv7, and armv8
Stars: ✭ 818 (+1717.78%)
Mutual labels:  x86-64
Blog os
Writing an OS in Rust
Stars: ✭ 8,120 (+17944.44%)
Mutual labels:  x86-64
Arm now
arm_now is a qemu powered tool that allows instant setup of virtual machines on arm cpu, mips, powerpc, nios2, x86 and more, for reverse, exploit, fuzzing and programming purpose.
Stars: ✭ 719 (+1497.78%)
Mutual labels:  x86-64
Ksm
A fast, hackable and simple x64 VT-x hypervisor for Windows and Linux. Builtin userspace sandbox and introspection engine.
Stars: ✭ 673 (+1395.56%)
Mutual labels:  x86-64
Mlml
self-hosted compiler for a subset of OCaml
Stars: ✭ 41 (-8.89%)
Mutual labels:  x86-64
Svm kernel
x86_64 AMD kernel optimized for performance & hypervisor usage
Stars: ✭ 32 (-28.89%)
Mutual labels:  x86-64
Os2
x86_64 OS kernel with completely async userspace and single address space [WIP; but basic kernel functionality implemented]
Stars: ✭ 25 (-44.44%)
Mutual labels:  x86-64
Openwrt
Automatic unattended weekly builds of the current OpenWrt development master branch for X86_64, Redmi-AC2100 (红米AC2100), Phicomm-K2P (斐讯K2P), K2P-32M-USB (K2P 32M USB版), NanoPi-R2S, Newifi-D2 (新路由3), Hiwifi-HC5962 (极路由4增强版), Xiaomi-R3P (小米路由PRO) and XY-C5 (小娱-C5).
Stars: ✭ 818 (+1717.78%)
Mutual labels:  x86-64
Reko
Reko is a binary decompiler.
Stars: ✭ 942 (+1993.33%)
Mutual labels:  x86-64
X86 Assembly Cheat
MOVED TO: https://github.com/cirosantilli/linux-kernel-module-cheat#userland-assembly SEE README. x86 IA-32 and x86-64 userland minimal examples tutorial. Hundreds of runnable asserts. Nice GDB setup. IO done with libc, so OS portable in theory. NASM and GAS covered. Tested in Ubuntu 18.04. Containers (ELF), linking, calling conventions. System land cheat at: https://github.com/cirosantilli/x86-bare-metal-examples, ARM cheat at: https://github.com/cirosantilli/arm-assembly-cheat
Stars: ✭ 773 (+1617.78%)
Mutual labels:  x86-64
Seq.asm
Minimal implementation of UNIX seq command in x86_64 assembly.
Stars: ✭ 37 (-17.78%)
Mutual labels:  x86-64
Open C Book
开源书籍:《C语言编程透视》,配套视频课程《360° 剖析 Linux ELF》已上线,视频讲解更为系统和深入,欢迎订阅:https://www.cctalk.com/m/group/88089283
Stars: ✭ 715 (+1488.89%)
Mutual labels:  elf
Reverse Engineering
This repository contains some of the executables that I've cracked.
Stars: ✭ 29 (-35.56%)
Mutual labels:  x86-64
Beelzebub
The Lord of Flies - A hobby operating system
Stars: ✭ 24 (-46.67%)
Mutual labels:  x86-64

PIvirus

PIvirus is a proof of concept for infecting linux x86_64 ELF binaries using PLT redirection technique

How it works

  • the virus looks for fclose function and hijacks it with a function that writes garbage from the stack to the stdout

  • the virus will infect x86_64 ELF binaries with the type [ ET_DYN || ET_EXEC ]

  • parasite injection is done by extending the text segment

  • PLT redirection happens at runtime and the virus is able to handle binaries which does not apply lazy binding

Usage

#./pivirus [ target directory ]

PIvirus-demo

License

MIT

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].