Lua语言在绕过主动防御技术中的作用

The Role of Lua Language in Bypassing Active Defense Mechanism

Lua是一个小巧的脚本语言,其设计目的是为了嵌入应用程序中,从而为应用程序提供灵活的扩展和定制功能。Lua由标准C语言编写而成,几乎兼容所有的操作系统。因此,在编写木马程式时,可考虑将Lua语言运用在代码里,特别是在躲避杀毒软件查杀方面可以做新的尝试。于是,在windows环境下利用Visual c++6.0成功实现将Lua解释器编译到木马程式中,并通过调用Lua脚本实现木马程式的自启动功能,达到成功绕过主流杀毒软件主动防御机制的拦截目的。

Lua,as a compact scripting language, is designed to embed applications and provide a flexible extension and customization capabilities for applications. Lua, written in standard C language, is compatible almost with all of the operating system for the writing of Trojans. So it is tried to apply Lua in the code, and a new attempt may also be made particularly in avoidance of detecting and killing by anti-virus software, Visual C ＋ ＋ 6.0 is successfully applied to compiling the Lua interpreter into Trojan program in Windows operating system, and by calling Lua script the self-starting function of Trojan programs is implemented,thus achieving the goal of successfully by passing the active defense mechanism of mainstream anti-virus software.