This recipe starts by running our automation script against the non-polymorphed version of the reverse shell binary, as explained in step 1.
Step 2 repeats these instructions but against the polymorphed version of the binary instead. We open a new Terminal tab in step 3, and in step 4 use the new tab to examine our output file for the non-polymorphed binary. We repeat these instructions in steps 5 and 6 in order to review the output file for the polymorphed version of the binary. In step 7, we compare the strings output and the readelf output of each binary. The following is the strings output for the non-polymorphed binary:
The first thing we notice in the preceding output is ////bash and /////bin. Looking at the polymorphed ...
