|
|
Remove Botnets With Bothunter
By Dan Morrill
Expert Author
Article Date: 2008-10-30
Security bloggers network releases a handy new tool to help you hunt down botnets on your network.
Belsec has put together a handy new tool to help you hunt down botnets that might be running on your network. As far as cool tools go, downloading it and playing with it this morning was more fun than a person should be allowed to have. Ramping it up on the corporate and the home networks gave out two very interesting pictures on what botnets are running on (or not running on) the computers that you own.
This is definitely a tool worth playing with and seeing if it can do something for you if you are worried about botnets. This is also a great research tool, because you can tie this into other tools to come up with very interesting botnet maps. The data output can be scrapped and dumped into Google earth via IP address.
The distros are:
Unix Distribution v1.0.1 (beta 2) - 21 October 2008, Linux: tested on Fedora, Red Hat Enterprise Linux, Debian, and SuSE distributions, FreeBSD: tested on Product Release 7.0, Mac OS X: tested on Tiger and Leopard, Mac OS 10.4 and 10.5
Coming Soon (Sometime in October 2008) are:
Windows XP Distribution v1.0.1 - TBD October 2008, BotHunter-Win32-v1.0.1.exe, (MD5 = Coming Soon - Halloween 2008) we will inform you, Windows XP: this self-installing Win32 executable will install all necessary supporting packages
Live-CD Distribution v1.0.1 - TBD October 2008, BotHunter-LiveCD.v1.0.1.ISO, (MD5 = Coming Soon - Halloween 2008), Live-CD: this is a self-booting ISO image of Bothunter operating on Ubuntu Linux
The live CD distro is probably going to be more fun as it can turn any computer into a botnet hunter without having to undo the original computer underneath it, but you will want a computer to take the data feed so that you can play around with the data output.
Comments
About the Author:
Dan Morrill has been in the information security field for 18 years, both
civilian and military, and is currently working on his Doctor of Management.
Dan shares his insights on the important security issues of today through
his blog, Managing
Intellectual Property & IT Security, and is an active participant in the
ITtoolbox blogging community.
|
|
