Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
Metamorphic and Polymorphic code are ways to change shellcode in order to make it undetectable by IDS. Which one of the following is a difference between them?
The metamorphic code could rewrite its engine every time it runs, while the polymorphic code has not the ability to do it.
They both change the code maintaining the algorithm used unmodified, but polymorphic code uses code encryption, Metamorphic one uses code obfuscation.
The polymorphic source code is exactly equivalent to its output, while the metamorphic one isn't.
The polymorphic code output a syntactically equivalent version of itself, while metamorphic code only a semantically (but not syntactically) equivalent one.
No one of these.
While the Polymorphic code as a static engine that can only change the way of change code ( as for encryptor/decryptor pair ), the metamorphic engine can instead make even a temporary version of itself through reverse engeenering, modify the temporary code with a permutator ( that transforms the code maintaining its logic) in combination with other modules (at least an instruction shuffler), and eventually reassemble it to machine code.
Train with Skillset and pass your certification exam. Faster. Guaranteed.
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.