Graviton: Cross Platform Malware (G) - Summary
This project is not part of the GNU Project.
Features:
0. Component-Based
1. Integration with metasploit (Binary Payload Components)
2. Sophisticated spreading techniques (Intercross Components)
3. Lua support
4. Fast execution
5. Easy to develop
History
I was exploiting ms08-67 vulnerability on a windows box machine protected by Kaspersky AV, during a pentest. exploit was lunched and meterpereter shell arrived. Kaspersky do nothing and victim’s machine was mine, and Bang… What if we write a devilish code which exploits itself?! I tell this idea to Farhad (my friend) and we start to research about that. finally I wrote our first code in C and compiled it with gcc, we run it, shell openned, and A.V was not suspicious to the file! So what was our main idea?
Purpose
The purpose of ‘graviton’ is to become a platform, a beautiful combination of simple and smart ideas. The purpose of ‘graviton’ is to become an artificial creature which can move between world of windows, world of apples, and world of emperor penguins, etc. and remain stealth! We believe as this project grows, security professionals will have a better and deeper understanding of how viruses, trojans, etc work, so they can fight and protect themselves against those, and they can even create ‘white viruses’, to spread and fight against malicious viruses, effectively. Currently the main idea of ‘graviton’ is this simple but powerful idea: “Write a code which can exploit itself, so you can evade any antivirus.”
How it works?
GraVitoN is a set of components and an attacker can choose his favorite components and design his favorite malware!
Note
‘graviton’ is a combination of pure ‘C++’ and ‘asm’ and ‘lua’. ‘graviton’ asks to be compiled by ‘gcc’! ‘graviton’ loves doxygen! GraVitoN has this parts: payloads, concealer, intercross, ai With graver you can compile and customize your graviton as virus, trojan or even worm. graviton project is hosted at savannah
Registration Date: Thu 24 May 2012 07:07:47 AM UTC
License: GNU General Public License v3 or later
Development Status: 3 - Alpha


