metame is a simple metamorphic code engine for arbitrary executables. From Wikipedia: Metamorphic code is code that when run outputs a logically equivalent version of its own code under some interpretation. This is used by computer viruses to avoid the pattern recognition of anti-virus software. metame implementation works this way: Open a given binary and analyze the code Randomly replace instructions with equivalences in logic and size Copy and patch the original binary to generate a mutated variant It currently supports the following architectures: x86 32 bits x86 64 bits Also, it supports a variety of file formats, as radare2 is used for file parsing and code analysis. Example of code before and after mutation: Hint: Two instructions have been replaced in this snippet. Here another example on how it can mutate a NOP sled into equivalent code: Installation pip install metame This should also install the requirements. You will also need radare2 . Refer to the official website for installation instructions. simplejson is also a “nice to have” for a small performance boost: pip install simplejson Usage metame -i original.exe -o mutation.exe -d Use metame -h for help. Download Metame
https://govanguard.com/wp-content/uploads/2018/04/Header_Logo.png 0 0 govanguard https://govanguard.com/wp-content/uploads/2018/04/Header_Logo.png govanguard2019-09-11 08:00:002019-09-11 08:00:00Metame - Metame Is A Metamorphic Code Engine For Arbitrary Executables
Our Standard Office Hours
Monday – Friday: 8:00AM – 5:00PM EDT
Saturday – Sunday: Closed
Where to Find Us
Data Privacy Notice
- – All product names, logos, and brands are property of their respective owners.
- – The use of these names, logos, and brands is for identification purposes only and does not imply endorsement.
- – Content syndication and aggregation of public information is solely for the purpose of identifying information security trends, all syndicated content contains source links to the content creator website. All content is owned by it’s respective content creators.
- – If you are an owner of some content and want it to be removed, please email firstname.lastname@example.org