Network Flight Simulator v2.5.1 (2024-04-04)

This release fixes problem with go install installing an old version of the tool.

Network Flight Simulator v2.5.0 (2023-07-31)

This release add a new cleartext module, which generates random cleartext traffic on some common ports.

Enjoy!

Network Flight Simulator v2.4.0 (2023-07-10)

This release adds:

• A new IRC module simulating traffic to IRC servers
• A new Telegram Bot module simulating traffic to Telegram API

Full Changelog: v2.3.0...v2.4.0

Enjoy!

Network Flight Simulator v2.3.0 (2023-03-07)

This release adds:

• A new OAST module simulating out-of-band application security testing traffic
• Go 1.19 compilation
• Library updates (including those that fix):
  • CVE-2022-3064 High severity
  • CVE-2019-11254 Moderate severity
  • CVE-2021-4235 Moderate severity

Full Changelog: v2.2.2...v2.3.0

Enjoy!

Network Flight Simulator v2.2.2 (2022-02-15)

This release adds:

• Fix DNS probing on Windows

Full Changelog: v2.2.1...v2.2.2

Network Flight Simulator v2.2.1 (2021-10-27)

This release adds:

• a fix removing superfluous error messages

Full Changelog: v2.2.0...v2.2.1

Network Flight Simulator v2.2.0 (2021-10-27)

This release adds:

• two SSH modules (ssh-transfer and ssh-exfil) simulating SSH data transfer to standard and non-standard ports
• an imposter module simulating connectivity to imposter domains
• a get command capable of retrieving C2 families for later use with the C2 module
• several bugfixes for DNS-type modules, and dga.

Full Changelog: v2.1.1...v2.2.0

Enjoy!

Network Flight Simulator v2.1.1 (2021-07-28)

This release shifts our CI workflow from CircleCI to GitHub Actions. On top of binary tar archives for GNU/Linux, FreeBSD, Darwin and Windows, we're also releasing DEB, RPM, and APK packages.

Full Changelog: v2.1.0...v2.1.1

Here we go – a brand new release of flightsim to keep your network safe in 2020! We've added two new modules:

• miner, which generates Stratum mining protocol traffic to known cryptomining pools;
• tunnel-icmp, which generates ICMP tunneling traffic to an Internet service operated by AlphaSOC.

We've also improved the output so it's easier to read and made errors a little bit less confusing (we're still working towards perfection on this matter).

Have a try and let us know if it works (or not) for you!

This is a new – and preferred – major release of your favourite malicious network traffic synthesis software.

There are many bug fixes and improvements within the engine, which will allow us to introduce new modules in the coming future. A new feature has been introduce where one can simulate traffic for a specific malware family, e.g. TrickBot or Emotet. You can evaluate your coverage by running:

./flightsim run c2:trickbot c2:emotet

Please refer to ./flighsim run -h to see more options and flags, as these have changed since flightsim v1. Your feedback is very welcomed, just leave a comment at https://github.com/alphasoc/flightsim/issues.

Happy malware hunting!