Polymorphing is distributed as drop-in replacement packages for all the existing packages on an existing Linux host, by pulling them from a Polyverse "mirror".

We provide a simple script to subscribe to the mirrors, with a personalized key found on your individual account page. For this demo, we'll use an install script from a demo account.

curl https://sh.polyverse.io | sh -s install 20i3dIRM9PKxpFbJ8ZV7lfWZA [email protected]

Now that we've subscribed to the Polyverse mirrors, it is transparent to the host. The package manager doesn't know anything different, and we can use all its power to our benefit.

To reinstall all packages, for Ubuntu, we run:

apt-get update && apt-get -y install --reinstall $(dpkg --get-selections | awk '{print $1}')

All this command does, is updates the package manager metadata, and reinstalls all packages in-place.

Let's verify that we did indeed scramble packages on the system.

We can do this in multiple ways.

The quick and easy way is to check the source of the package. For Ubuntu, the command is:

dpkg --get-selections | awk '{print $1}' | xargs apt-cache madison | grep -i polyverse