nerdexam
GIAC

GSLC · Question #254

Which of the following tools can be used to perform polymorphic shell code attacks?

The correct answer is A. ADMutate. ADMutate is a tool specifically designed to generate polymorphic shellcode by mutating exploit payloads to evade signature-based intrusion detection systems.

Security Architecture & Engineering

Question

Which of the following tools can be used to perform polymorphic shell code attacks?

Options

  • AADMutate
  • BTrueCrypt
  • CFragroute
  • DMendax

How the community answered

(37 responses)
  • A
    86% (32)
  • B
    3% (1)
  • C
    3% (1)
  • D
    8% (3)

Why each option

ADMutate is a tool specifically designed to generate polymorphic shellcode by mutating exploit payloads to evade signature-based intrusion detection systems.

AADMutateCorrect

ADMutate takes existing shellcode and applies polymorphic transformations, such as variable NOP sleds and encoded payloads, producing functionally equivalent but signature-different shellcode on each run. This technique is used to bypass IDS/IPS systems that rely on static shellcode signatures.

BTrueCrypt

TrueCrypt is a full-disk and volume encryption utility with no capability to generate or mutate exploit shellcode.

CFragroute

Fragroute is a network packet fragmentation tool used to evade network-level inspection by splitting packets, not to generate polymorphic shellcode.

DMendax

Mendax is not a recognized tool for polymorphic shellcode generation and is not associated with this attack category.

Concept tested: Polymorphic shellcode generation and IDS evasion tools

Source: https://www.kali.org/tools/admutate/

Topics

#polymorphic shellcode#ADMutate#exploit tools#IDS evasion

Community Discussion

No community discussion yet for this question.

Full GSLC Practice