Security Hero Rotating Header Image

Howto Simulate a BotNet ?

Re: Howto Simulate a BotNet ?

Posted by Valdis.Kletnieks_at_vt.edu on May 06

On Wed, 06 May 2009 18:07:48 CDT, Mark Sec said:

> Does any1 know a tool. squema, info or ideas to simulate a Botnet?
>
> Ideas:
>
> A) Many Vmware (workstations) over win32
> B) Make a fake traffic
> C) Make a scripts to simulate many hosts
> D) IDS/ IPS (to see…

URL: http://seclists.org/fulldisclosure/2009/May/0049.html

5 Comments

  1. "Full Disclosure (fulldisclosure) Mailing List" says:

    Re: Howto Simulate a BotNet ?

    Posted by Aadil Noorkhan on May 7

    Hello,

    The closest I could find are:
    http://pages.cs.wisc.edu/%7Epb/botnets_final.pdf (rather interesting
    paper about an inside look at botnets)
    http://www.breakingpointsystems.com/community/blog/botnet-simulation
    (video about a botnet simulation by BreakingPointSystems)

    Cheers,
    Aadil….

    URL: http://seclists.org/fulldisclosure/2009/May/0050.html

  2. "Full Disclosure (fulldisclosure) Mailing List" says:

    Re: Howto Simulate a BotNet ?

    Posted by T Biehn on May 7

    Emulate every API call make your bot makes.
    Run 30b instances.
    Randomize.
    A. Graph.
    B. Optimize.

    Repeat steps a and b.

    -Travis
    On Thu, May 7, 2009 at 10:28 AM, Jan G.B. <ro0ot.w00t_at_googlemail.com> wrote:
    > 2009/5/7 Mark Sec <mark.sec_at_gmail.com>:
    >>…

    URL: http://seclists.org/fulldisclosure/2009/May/0063.html

  3. "Full Disclosure (fulldisclosure) Mailing List" says:

    Re: Howto Simulate a BotNet ?

    Posted by Shyaam on May 8

    ns2 is a very good option. Generally, I have noticed researchers using
    it for Wireless Sensor Networks, because it gives most accurate
    results too. But again it depends on what you are trying to achieve.

    Are you looking to trigger botnet signatures in your end point device?
    Or are you trying…

    URL: http://seclists.org/fulldisclosure/2009/May/0065.html

  4. "Full Disclosure (fulldisclosure) Mailing List" says:

    Re: Howto Simulate a BotNet ?

    Posted by Tomas L. Byrnes on May 8

    Excuse the toppost:

    You might want to look into the work done @ SRI on the BotHunter project by Phil Porras, and Farnham Jahanian and others’ work @ University of Michigan, which led to the creation of Arbor Networks.

    >—–Original Message—–
    >From:…

    URL: http://seclists.org/fulldisclosure/2009/May/0072.html

  5. "Full Disclosure (fulldisclosure) Mailing List" says:

    Re: Howto Simulate a BotNet ?

    Posted by Shyaam on May 8

    That is a nice tool as such. Many of my friends have tested it, and it
    is really cool.

    Shyaam

    On Fri, May 8, 2009 at 10:00 PM, Tomas L. Byrnes <tomb_at_byrneit.net> wrote:
    > Excuse the toppost:
    >
    > You might want to look into the work done @ SRI on the BotHunter…

    URL: http://seclists.org/fulldisclosure/2009/May/0073.html

Leave a Reply

Your email address will not be published. Required fields are marked *