How to do it...

Let's test our signature detection script against our polymorphed binary. Run the following steps exactly as you see them:

  1. In the first Terminal tab, type the following command:
$ ./sigDetect.py ch10-revshell64-poly
  1. In the second Terminal tab, type the following command:
$ less non-poly-output*
  1. Use the down arrow on the keyboard in this Terminal tab to navigate to the *** OBJDUMP EXECUTABLE *** section of the output.
  2. Review this output.
  3. In the third Terminal tab, type the following command:
$ less poly-output*
  1. Use the down arrow on the keyboard in this Terminal tab to navigate to the *** OBJDUMP EXECUTABLE *** section of the output.
  2. Review this output, and compare it with the output of the non-polymorphed version of the output.
..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
3.15.229.113