A script to simulate different kind of malicious network activity, like communication with well known malicious C2 servers, DNS-tunneling, etc.
How to run:
python3 malsim.py -m dnz_zone_transfer -r 192.168.0.1 -d domain.local
Available modules:
- cobaltstrike_dns_tunneling_staging
- cobaltstrike_dns_tunneling_beaconing
- kraken_dga
- kraken_ddns
- well_known_malicious_domains
- sinholed_domains
- dns_bruteforce
- dnz_zone_transfer