Home

Table of Contents

General Application

• Program Arguments

Attacks

• DDoS Attack
• EternalBlue Exploit
• FTPWinaXe Exploit
• JoomlaRegPrivesc Exploit
• MembersMgmtComm Attack
• MemcrashedSpoofer Attack
• MS17Scan Attack
• Portscan Attack
• SMBLoris Attack
• SMBScan Attack
• SQLi Attack
• Sality Botnet

Statistics Database

• ID2Tv1.0 Statistics DB: Tables
• Extended ID2T Statistics DB: Tables

BotnetTraffic

General Application

• Additional Plots
• Calling the Attack
• Input of a CSV or XML File Containing Abstract Botnet Communication
• Mapping of PCAP Packets to Input CSV/XML Messages
• Supported Attack Parameters
• Test for Deterministic Output

Source Code Guide

• C-- Modules
  • botnet_comm_processor

Implicit Features

• Adding padding to the packets
• Choosing an Interval from the Abstract Communication Input File
• Ephemeral Port Assignment
• Generate Random Ports
• Mapping IPs to IDs
• Mapping IP Address to ASN
• Timings of Messages and their Responses

Statistics Database

• DB Table for Extended Conversation Statistics
• DB Table for Degree Statistics of each IP Address