malware IP blacklist project for fun, c++

c0ldshadow · 11-08-2009, 10:38 PM

http://laserpointerforums.com/deeptide.htm

goal is to download & extract all IPs associated w/ malware from Malware Domain List

prob has some off by one bugs, i haven't coded c++ in a bit

also going to try and pull IPs of ZeuS C&C servers from https://zeustracker.abuse.ch/

also build list of hashes of bad files too

the prog will eventually do these:

detect for new files on system w/ hashes matching those of Zeus bots
scan network traffic for attempts to access zeus servers and other malware servers from MDL

if anyone sees bugs or better way to do what already is here plz let me know... there are prob better ways to code this lol... if u see bug or improvement plz do let me know=)

charliebruce · 11-08-2009, 11:04 PM

If this isn't a stupid question, why not just use WGET instead of download_file for cleanliness and simplicity of code?

c0ldshadow · 11-08-2009, 11:32 PM

yeah that would be a lot more clean and simple... just wanted to try and use winsock2 since it would be more interesting, more to learn w/ it and stuff to explore

11-08-2009, 10:38 PM	#1
c0ldshadow Security Engineer Join Date: Mar 2006 Posts: 2,584 Rep Power: 10	malware IP blacklist project for fun, c++ http://laserpointerforums.com/deeptide.htm goal is to download & extract all IPs associated w/ malware from Malware Domain List prob has some off by one bugs, i haven't coded c++ in a bit also going to try and pull IPs of ZeuS C&C servers from https://zeustracker.abuse.ch/ also build list of hashes of bad files too the prog will eventually do these: detect for new files on system w/ hashes matching those of Zeus bots scan network traffic for attempts to access zeus servers and other malware servers from MDL if anyone sees bugs or better way to do what already is here plz let me know... there are prob better ways to code this lol... if u see bug or improvement plz do let me know=)

11-08-2009, 11:04 PM	#2
charliebruce Class 3R Laser Join Date: Nov 2008 Location: London, UK Posts: 1,554 Rep Power: 116	Re: malware IP blacklist project for fun, c++ If this isn't a stupid question, why not just use WGET instead of download_file for cleanliness and simplicity of code?

11-08-2009, 11:32 PM	#3
c0ldshadow Security Engineer Join Date: Mar 2006 Posts: 2,584 Rep Power: 10	Re: malware IP blacklist project for fun, c++ yeah that would be a lot more clean and simple... just wanted to try and use winsock2 since it would be more interesting, more to learn w/ it and stuff to explore

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode