The Mixters hideout - http://mixter.org

Obsidian - a new virus by Mixter coded in C++.
Platforms include Linux and FreeBSD, and all
other UNIX systems that can execute linux ELF binaries.

In contrast to fuzz/fuzzy, this virus will
not perform any optional malicious actions.
It consists of a completely re-written directory/file
search-structure that will get a random file
from a random directory that is set in the $PATH
environment variable. It performs various checks
on the file, and if it is an uninfected ELF binary, it will
copy the target (virus slang: "host-") file to a temporary
location, and insert its own code (the virus code from
the infected file it is running from) into the
binary, copy it back and execute it.
If compiled with -DDEBUG, a log file will be created
in /tmp/obsidian.log.
This is a demo virus and infects 1 binary per run.
It will not execute as root for security purposes.

COMPILING TIPS:
Please redefine the VLENGTH to match your systems
libraries. As a rule of thumb, it should be 32-64
bytes less than the total size of the compiled
binary in bytes (type 'du -b obsidian'). This
value can differ, and it depends if you compile it
with -DDEBUG. I included some precompiled binaries
that should work.

MD5SUM				  FILE
cf63fc845363b38571d68c83339c4c60  obsidian-glibc2+tracefile.ELF
5216e44f4eea22745c2d025e7d608543  obsidian-glibc2-pure.ELF
9ca3227e8d8602c4afa3eb76d4618a7e  obsidian-static.ELF
42392783398814d98a34370b3c534c6f  obsidian-static-pure.ELF

-- Mixter
<mixter@mixter.org>
