Woody Woodpacker

Pack any ELF x86_64 binaries with WOODY packer (Ecole 42 UNIX Security project)

[Blog Post]

This project includes:

• LZ77 compression algorithm
• AES encryption algorithm for additional security
• Stub small piece of code that will decompress and run binary when needed

Before installing and using this packer, please, read the disclaimer.

Contents

• Disclaimer
• Installation and Usage
  • Linux/macOS
  • Docker
• ELF header parser
• Compression
  • LZ77 data compression algorithm
• Encryption
• Stub
  • Injection
  • Decryption
  • Execution

---

Disclaimer

This project is an intro to bypassing AntiVirus.
Anything that will use this packer and outside the law - is not my responsibility.
Just don't do any harmful things.
Peace!

Installation and Usage

Linux or macOS

git clone https://github.com/georghegel/woodywoodpacker.git
cd woodywoodpacker
make

./woody <ELF_FILENAME>

Docker

ELF header parser

[Official Description of ELF header]

ELF header structure image

Compression

LZ77 data compression algorithm

Encryption

Stub

Injection

Decryption

Execution