guitmz/Fe2O3

Stars
108
Rank 314,198 (Top 7 %)
Language
Rust
License
MIT License
Created almost 5 years ago
Updated almost 5 years ago

guitmz/Fe2O3

guitmz

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Simple prepender virus written in Rust

Linux.Fe2O3

This is a POC ELF prepender written in Rust. I like writting prependers on languages that I'm learning and find interesting. As for the name, Fe2O3 is the chemical formula of Rust, I thought it was appropriate.

Build

$ rustc main.rs -o Linux.Fe2O3

Note that the Rust version used is rustc 1.37.0 (eae3437df 2019-08-13), the latest at this moment.

Binary Sample

A binary sample is also available at https://www.guitmz.com/Linux.Fe2O3

$ file Linux.Fe2O3
Linux.Fe2O3: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, with debug_info, not stripped

$ sha1sum Linux.Fe2O3
c185ab0fd9b1c8f3ddaed7079898383edbcbb7f7  Linux.Fe2O3

Demo

virii

Collection of ancient computer virus source codes

ezuri

A Simple Linux ELF Runtime Crypter

n26

API and CLI to get information of your N26 account

memrun

Small tool to run ELF binaries from memory with a given process name

go-liora

Probably the first binary (PE/ELF) infector ever created in GoLang.

midrashim

PT_NOTE to PT_LOAD x64 ELF infector written in Assembly

go-weather-indicator

Minimalistic GTK weather indicator written in GoLang.

nim-cephei

Probably the first ELF binary infector ever created in Nim.

gocave

Finding code caves in ELF files with GoLang

nasty

Reverse text segment x64 ELF infector written in Assembly

msil-cecil-injection

Injection of MSIL using Cecil

ansi-escape

Using ANSI escape codes with x64 Linux Assembly

transferwise

A command line tool to get quotes from TransferWise

3-tier-app-aws-terraform

Simple 3-tier app example delpoyed to AWS using Terraform

vala-zariche

Linux.Zariche: a Vala virus

defjam

dynamic-api-caller-dotnet

A class which can dynamically call a Windows API function at runtime using Reflection.Emit.

bucket

A interactive shell to manage files in AWS S3.

mbr-dumper

A .NET (C#) application that dumps the disk MBR onto a file.

offsetter

Convert between file offsets and virtual addresses with Go

nim-builder

Docker container to run and build Nim code

fasm-docker

Docker container to build FASM code

rebar

A status line generator for Lemonbar, written in Rust.

Paper-Repo

Aggregated content from the vx-underground paper collection. Files may not be named correctly.

python-file-crypter

Encrypt any file using Python (RC4)