RECON06 . A PLATFORM INDEPENDENT MULTI-CAVITY NOP VIRUS
- » First what we have to do is identify the OS. To differentiate between UNIX and windows we know that on most UNIXes a certain amount of segment registers must be identical and that on windows a couple must be different.
- » To differentiate between UNIXes, we call a system call with invalid arguments and compare check if the error returned is negative or positive. On BSD's it'll be positive but on Linux it'll be negative.