OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Botnets

From: Laurens Vets (laurensdaemon.be)
Date: Fri Mar 27 2009 - 03:05:49 CDT


Hello Munyaradzi,

> Can someone please explain to me how botnets use IRC? I want to make a
> presentation to my group demonstrating this in my lab which comprises
> of 4 winxp boxes. Unpatched. How are commands issued via IRC?

Simply put, as soon as your pc is infected, it will open an IRC
connection to some IRC server just like a real life person would do...

One example of how this happens can be read here:
http://www.honeynet.org/node/54

Do a search for "tracking botnets" on Google and you'll see lots of
papers and articles about how bots communicate which each other.

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

No time or budget for traveling to a training course in this fiscal year? Check out the online penetration testing courses available at InfoSec Institute. More than a boring "talking head", train in our virtual labs for a total hands-on training experience. Get the certs you need as well: CEH, CPT, CEPT, ECSA, LPT.

http://www.infosecinstitute.com/request_online_training.html
------------------------------------------------------------------------