full-disclosure - Re: Howto Simulate a BotNet ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <5598cfa10905070701w836babdtca84bbc2e639afc5@mail.gmail.com>
Date: Thu, 7 May 2009 09:01:01 -0500
From: Mark Sec <mark.sec@...il.com>
To: Aadil Noorkhan <a.noorkhan@...kbynet.com>
Cc: Untitled <full-disclosure@...ts.grok.org.uk>,
	"Valdis.Kletnieks@...edu" <Valdis.Kletnieks@...edu>
Subject: Re: Howto Simulate a BotNet ?

Well, Im looking info:

1) See all the traffic (Over botnet)
2) Administering many slaves (Lab) with the master (lab) via IRC, web,
etc...
3) Probe attacks DDoS and DoS (Lab)
4) Probe remote and Local Exploits
5) Infected via remote <iframe>, exploit, XSS etc.

any1 ?

-Mark :-)




2009/5/6 Aadil Noorkhan <a.noorkhan@...kbynet.com>

> Hello,
>
> The closest I could find are:
> - http://pages.cs.wisc.edu/%7Epb/botnets_final.pdf (rather interesting
> paper about an inside look at botnets)
> - http://www.breakingpointsystems.com/community/blog/botnet-simulation
> (video about a botnet simulation by BreakingPointSystems)
>
> Cheers,
> Aadil.
>
> On Thu, 2009-05-07 at 05:36 +0400, Valdis.Kletnieks@...edu wrote:
> > On Wed, 06 May 2009 18:07:48 CDT, Mark Sec said:
> >
> > > Does any1 know a tool. squema, info or ideas to simulate a Botnet?
> > >
> > > Ideas:
> > >
> > > A) Many Vmware (workstations) over win32
> > > B) Make a fake traffic
> > > C) Make a scripts to simulate many hosts
> > > D) IDS/ IPS (to see the traffic)
> >
> > What behavior(s) of a botnet are you trying to simulate?  There's a lot
> > of approaches, as you've already noticed - which one will work best will
> > depend a lot on what you're trying to do.
> --
> Aadil NOORKHAN
> Administrateur Unix
> ------------------------------------------------------
> LINKBYNET Indian Ocean
> BG Court, Route Saint-Jean, Quatre Bornes, Ile Maurice
> Tel direct : (+33) 01 48 13 21 78
> Tel : (+33) 1 48 13 00 00
> Fax : (+33) 1 48 13 31 21
> Email : a.noorkhan@...kbynet.com
> Web : www.linkbynet.com
> ______________________________________________________
> Astreinte : http://www.linkbynet.com/astreinte/
>
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/