guitmz/Fe2O3

Stars
108
Rank 321,259 (Top 7 %)
Language
Rust
License
MIT License
Created about 5 years ago
Updated about 5 years ago

guitmz/Fe2O3

guitmz

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Simple prepender virus written in Rust

Linux.Fe2O3

This is a POC ELF prepender written in Rust. I like writting prependers on languages that I'm learning and find interesting. As for the name, Fe2O3 is the chemical formula of Rust, I thought it was appropriate.

Build

$ rustc main.rs -o Linux.Fe2O3

Note that the Rust version used is rustc 1.37.0 (eae3437df 2019-08-13), the latest at this moment.

Binary Sample

A binary sample is also available at https://www.guitmz.com/Linux.Fe2O3

$ file Linux.Fe2O3
Linux.Fe2O3: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, with debug_info, not stripped

$ sha1sum Linux.Fe2O3
c185ab0fd9b1c8f3ddaed7079898383edbcbb7f7  Linux.Fe2O3

Demo

virii

Collection of ancient computer virus source codes

ezuri

A Simple Linux ELF Runtime Crypter

n26

API and CLI to get information of your N26 account

memrun

Small tool to run ELF binaries from memory with a given process name

go-liora

Probably the first binary (PE/ELF) infector ever created in GoLang.

midrashim

PT_NOTE to PT_LOAD x64 ELF infector written in Assembly

nim-cephei

Probably the first ELF binary infector ever created in Nim.

go-weather-indicator

Minimalistic GTK weather indicator written in GoLang.

gocave

Finding code caves in ELF files with GoLang

nasty

Reverse text segment x64 ELF infector written in Assembly

msil-cecil-injection

Injection of MSIL using Cecil

ansi-escape

Using ANSI escape codes with x64 Linux Assembly

transferwise

A command line tool to get quotes from TransferWise

capable

Interact with Capacities.io API from your terminal

3-tier-app-aws-terraform

Simple 3-tier app example delpoyed to AWS using Terraform

vala-zariche

Linux.Zariche: a Vala virus

dynamic-api-caller-dotnet

A class which can dynamically call a Windows API function at runtime using Reflection.Emit.

defjam

bucket

A interactive shell to manage files in AWS S3.

mbr-dumper

A .NET (C#) application that dumps the disk MBR onto a file.

offsetter

Convert between file offsets and virtual addresses with Go

nim-builder

Docker container to run and build Nim code

fasm-docker

Docker container to build FASM code

rebar

A status line generator for Lemonbar, written in Rust.

Paper-Repo

Aggregated content from the vx-underground paper collection. Files may not be named correctly.

python-file-crypter

Encrypt any file using Python (RC4)