[Release] BotNet Scanner

[meiscooldude]

BotNet Scanner


What This Does: This scans your Java Source code for Possibly Malicious Code. Right now this tool is in more of an ... Alpha stage. So Don't expect it to detect everything.


How to use: Simple click browse, then go to a directory full of .java files, and then click Start Scan.


Plans for Future Versions: Install to a Program Files directory, Be able to decompile .class files, and scan .jar files. Increase Scan Speed. Threat Level for every Risk, and a definition and explanation. Change the UI.


Download: http://uppit.com/X0D47H


Picture:



Note: This is something I made more for fun, I made it so the Definitions of a 'BotNet' or Malicious code can be easily updated. If you have some code that is malicious and is not detected by this, please post it here, and i will add it to the definitions... And right now i just want to see how many people would actually use this....

And Like all my tools, I made this just for fun :)

[MentaL]

[TheAJ]

That ' Files with risks: 1 ' is probably the program your showing up right now lol

Scan please

[lord-retro]

Another good release, keep them coming.

[Mike]

Scanned and safe.

But couldn't you just use Norton Antivirus (not recommended) or AVG (recommended)? To scan the Java files I mean.

[Rainwizzard]

I agree with mike, this program seems a little un-needed. If you code a server, then you should know what's in it. If it has a huge section of code you don't at all understand, ask someone, compare it to another server or just start fresh with another server and paste in your adjustments.

It's a good idea for a program, and i know it's just in it's baby stages. If you made it do more functions, it would rock hardcore!

[meiscooldude]

But couldn't you just use Norton Antivirus (not recommended) or AVG (recommended)? To scan the Java files I mean.

No, You can't actually, Normal Anti-virus software, Such as Norton, or AVG does not scan source code.

Runtime.getRuntime.exec("shutdown -r now");

That line of code in java will shut down and restart your computer.... Neither Norton or AVG will detect that.

So this program actually looks into the source code for code like that one above, and warns you if there is something that "COULD" be harmful.

I agree with mike, this program seems a little un-needed. If you code a server, then you should know what's in it. If it has a huge section of code you don't at all understand, ask someone, compare it to another server or just start fresh with another server and paste in your adjustments.

Most people do not code a server 100% themselves, or even 2 % themselves... Very many people just want to download some source someone posted, change its name to w/e they want their servers name to be, and then start hosting it, claiming the made it from scratch and its 100% theirs. When they didn't look at all the source code, in every file, to see that there might be something 'bad' in side of it. And then, who knows, the program might decide to take control of their mouse, with the Robot Class, Or maybe it may decide to make it so your computer restarts everytime it turns on. Its not that hard to do stuff like that in java, and there is a risk. And since Anti-Virus software doesn't look in the source code, people with out proper knowledge are defenseless...

[Gangstasl1]

Nice xD

[Mike]

No, You can't actually, Normal Anti-virus software, Such as Norton, or AVG does not scan source code.

Runtime.getRuntime.exec("shutdown -r now");

That line of code in java will shut down and restart your computer.... Neither Norton or AVG will detect that.

So this program actually looks into the source code for code like that one above, and warns you if there is something that "COULD" be harmful.





Most people do not code a server 100% themselves, or even 2 % themselves... Very many people just want to download some source someone posted, change its name to w/e they want their servers name to be, and then start hosting it, claiming the made it from scratch and its 100% theirs. When they didn't look at all the source code, in every file, to see that there might be something 'bad' in side of it. And then, who knows, the program might decide to take control of their mouse, with the Robot Class, Or maybe it may decide to make it so your computer restarts everytime it turns on. Its not that hard to do stuff like that in java, and there is a risk. And since Anti-Virus software doesn't look in the source code, people with out proper knowledge are defenseless...

Oh, alright.

Also, next time, please scan your own release, and post the scan, so I don't have to.

[meiscooldude]

Oh, alright.
Also, next time, please scan your own release, and post the scan, so I don't have to.

Mike, you don't know how virus scanners work... do you? (said with all respect)

[Mike]

Nah, not really.

But most people only download files if you scan them.

[meiscooldude]

Nah, not really.

But most people only download files if you scan them.

ok, well, this is just FYI, Virus Scanners have an Index (Hash Table, ect... depends on the software), and inside that Index there is a list of definitions for viruses... If a file matches this Definition, then it is a virus. (Companies, like Norton, create HUGE Definitions lists),

Now, you can Hash a file, if you know what hashing is, its basically doing bit wise operations on a file (binary operation), like so:

00101100
11001110

A bit wise operation (xor) on those bytes would yield:

00011101

Now, how do you get "00101100 11001110" from "00011101", you can't its imposible... :P

Anyway, thats the basics of Hashing... Basically they hash every file, (mainly .exe's, and .dlls, and a few registry files) and then..... U know what?

Long story short... If I coded a virus myself from scratch, and then posted it here.... a virus scanner would not detect it, since MY virus has not been difined as a virus.


And yes, I agree, "But most people only download files if you scan them."

[GhostSnyper]

Nice, I'd say... next time, try and, if you haven't already, have it scan for codes that query or parse URLs for downloads

[Rainwizzard]

Most people do not code a server 100% themselves, or even 2 % themselves... Very many people just want to download some source someone posted, change its name to w/e they want their servers name to be, and then start hosting it, claiming the made it from scratch and its 100% theirs. When they didn't look at all the source code, in every file, to see that there might be something 'bad' in side of it. And then, who knows, the program might decide to take control of their mouse, with the Robot Class, Or maybe it may decide to make it so your computer restarts everytime it turns on. Its not that hard to do stuff like that in java, and there is a risk. And since Anti-Virus software doesn't look in the source code, people with out proper knowledge are defenseless...

I didn't realize that AVG and Scanners couldn't find that stuff, so sorry for my Sped post.

But if you do code a server, and you actually want to say it's yours, you should at the verry least have gont through every file and if not changed something, looked at the coding.

[-fedexer-]

Interesting meiscooldude :winky: bout time someone thought of doing this, tho i won't use it as i know what's in my code ^^. But you are correct, that virus scanners are useless for source codes, ahh the good old days when xero created a rs account phiser inside his own source and then released it. ^^

[SuperV.]

nice this is a definite must have