A dilemma in the botnet scene

I'll give you an exciting brief introduction ... =p

by Cody and Pedram Amini

"
...

Cody and I thought it would be interesting to examine Kraken with the specific goal of infiltrating the bot network. We started with a sample from Offensive Computing and working from there eventually concluded that we would indeed be able to infiltrate and take over increasingly larger portions of the Kraken bot net. Cody did most of the manual labor of protocol dissection, reverse engineering the encryption routines and eventually creating a fake Kraken server capable of overtaking a redirected zombie. His detailed write up on the reverse engineering process is available under "Owning Kraken".

..."

The links

http://dvlabs.tippingpoint.com/blog/2008/04/28/kraken-botnet-infiltration

http://dvlabs.tippingpoint.com/blog/2008/04/28/owning-kraken-zombies

Thanks Pedram for posting it on open.rce, some times i forget to check out others sources of information.

I know that is hard choice do what you want, but seems that you guys have doubts about the choice, so keep in secret analyzing... sometimes when you have to do the right thing you can't make it public, you know...

the world in a nutshell...