Simple DNS Sniffer in GoLang

Golang makes it really simple to code some otherwise arduous tasks. In this case, we needed to sniff raw network data, filter out DNS data, and send the DNS queries and responses to an Elasticsearch cluster. The resulting code is surprisingly simple thanks to libraries such as GoPacket, as you can see below: https://gist.github.com/dvas0004/3d280f95a83a3084b314ea208f19f9e9 The … Continue reading Simple DNS Sniffer in GoLang

Steganography Combo: StegHide and Twitter

The security site "DarkReading" had a couple of interesting articles on the use of steganography in malware: http://www.darkreading.com/endpoint/attack-uses-image-steganography-for-stealthy-malware-ops-on-instagram/d/d-id/1327170 http://www.darkreading.com/endpoint/new-malware-found-hiding-inside-image-files/d/d-id/1320895 The idea of an stealthy malware command and control center is very intriguing. As some researchers point out in the above articles, an ideal malware command and control center can deliver instructions to malware bots around … Continue reading Steganography Combo: StegHide and Twitter