GSLC · Question #254
Which of the following tools can be used to perform polymorphic shell code attacks?
The correct answer is A. ADMutate. ADMutate is a tool specifically designed to generate polymorphic shellcode by mutating exploit payloads to evade signature-based intrusion detection systems.
Question
Which of the following tools can be used to perform polymorphic shell code attacks?
Options
- AADMutate
- BTrueCrypt
- CFragroute
- DMendax
How the community answered
(37 responses)- A86% (32)
- B3% (1)
- C3% (1)
- D8% (3)
Why each option
ADMutate is a tool specifically designed to generate polymorphic shellcode by mutating exploit payloads to evade signature-based intrusion detection systems.
ADMutate takes existing shellcode and applies polymorphic transformations, such as variable NOP sleds and encoded payloads, producing functionally equivalent but signature-different shellcode on each run. This technique is used to bypass IDS/IPS systems that rely on static shellcode signatures.
TrueCrypt is a full-disk and volume encryption utility with no capability to generate or mutate exploit shellcode.
Fragroute is a network packet fragmentation tool used to evade network-level inspection by splitting packets, not to generate polymorphic shellcode.
Mendax is not a recognized tool for polymorphic shellcode generation and is not associated with this attack category.
Concept tested: Polymorphic shellcode generation and IDS evasion tools
Source: https://www.kali.org/tools/admutate/
Topics
Community Discussion
No community discussion yet for this question.