PIvirus

PIvirus is a proof of concept for infecting linux x86_64 ELF binaries using PLT redirection technique

How it works

the virus looks for fclose function and hijacks it with a function that writes garbage from the stack to the stdout
the virus will infect x86_64 ELF binaries with the type [ ET_DYN || ET_EXEC ]
parasite injection is done by extending the text segment
PLT redirection happens at runtime and the virus is able to handle binaries which does not apply lazy binding

#./pivirus [ target directory ]

MIT

Failed to load latest commit information.
Makefile	modify makefile	Mar 9, 2018
README.md	initial commit	Mar 9, 2018
hostile.s	fix wrong order of macro calls	Mar 10, 2018
pivirus.c	add infection functions	Mar 9, 2018