{"repo":"baderj/domain_generation_algorithms","free":true,"listed":false,"github":"https://github.com/baderj/domain_generation_algorithms","clone":"git clone https://github.com/baderj/domain_generation_algorithms.git","description":"Some results of my DGA reversing efforts","language":"Python","stars":691,"topics":["dga","domain-generation-algorithm","python","malware","reverse-engineering"],"license":"GPL-2.0","category":"security-tools","readme_excerpt":"Domain Generation Algorithms Domain Generation Algorithms (DGAs) of Malware reimplemented in Python. Overview banjori (aka MultiBanker 2, BankPatch(er)) Links - http://johannesbader.ch/2015/02/the-dga-of-banjori/ Example Domains - earnestnessbiophysicalohax.com - kwtoestnessbiophysicalohax.com - rvcxestnessbiophysicalohax.com - hjbtestnessbiophysicalohax.com - txmoestnessbiophysicalohax.com - agekestnessbiophysicalohax.com - dbzwestnessbiophysicalohax.com - sgjxestnessbiophysicalohax.com - igjyestnessbiophysicalohax.com - zxahestnessbiophysicalohax.com bazarbackdoor (aka BazarLoader Team9Backdoor)) Links - https://johannesbader.ch/blog/the-dga-of-bazarbackdoor/ - https://johannesbader.ch/blog/the-buggy-dga-of-bazarbackdoor/ - https://johannesbader.ch/blog/the-buggy-dga-of-bazarbackdoor/ Example Domains Real DGA: - adegjkaiggjm.bazar - eehhjmejjhjo.bazar - dehiildjjiin.bazar - ceeiklcjgikn.bazar - dceikkdhgikm.bazar - bfehjmbkghjo.bazar - adegjmaiggjo.bazar - dchiikdhjiim.bazar - efehikekghim.bazar - bdhhjkbijhjm.bazar Buggy DGA: -\\ fdgimzkfgio.bazaar -e\\ bfkieedfkk.bazaar -efdgikekfgim.bazaar -\\]begimzgggio.bazaar -bbbfhlbgdfhn.bazaar -\\^ehikizjjikk.bazaar -aechimajehio.bazaar -\\]defiizigfik.bazaar -\\ \\ geiizeieik.bazaar -degfjkdjifjm.bazaar bumblebee Example Domains - cmid1s1zeiu.life - itszko2ot5u.life - 3v1n35i5kwx.life - newdnq1xnl9.life - jkyj6awt1ao.life - ddrjv6y42b8.life - 1pnhp5o5za1.life - y13iqvlfjl5.life - xp0btfgegbo.life chinad Links - https://github.com/360netl","default_branch":null,"files":null,"tree":[],"storefront":"/r/baderj","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/baderj/domain_generation_algorithms/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}