gobermann

README

gobermann

Basic usage of Gobermann

Usage:
  gobermann [flags]

Flags:
  -a, --alg string        The domain generating algorithm to use.[locky, nymaim2, necurs, monero] (default "locky")
  -b, --burst int         Number of requests in a burst of DNS traffic (default 15)
  -d, --delay int         Delay between requests in a burst in milliseconds (default 500)
  -s, --dns string        Target DNS Server (default "1.1.1.1")
  -h, --help              help for gobermann
  -i, --interval int      Delay between bursts in minutes (default 720)
  -l, --loglevel string   Include verbose messages from program execution [error, warn, info, debug] (default "info")
  -r, --nodryrun          Send DNS traffic over the wire
  -v, --version           version for gobermann

Purpose

Gobermann is a utility for emulating traffic patterns of malware using domain generation algorithms to reach out and identify C2 servers. The Go language was chosen for is flexibility of compliation and deployment.

This project is inspired by Maltese which was developed by Hewlett Packard Enterprise but is no longer maintined.