IDS mailing list archives
Worminator - SMTP malware signature creation tool
From: Yuri Gushin <yuri () ecl-labs org>
Date: Wed, 29 Nov 2006 13:28:45 +0200
Hey guys, I'd like to announce the release of a Win32 tool for easing/automating the process of creating IDS/IPS signatures for SMTP based worms, providing a comfortable GUI, including raw base64 variants and Snort signatures support. This tool is aimed to make the lives of people who sign worms at IDS/IPS level easier, and it does that and more. You may modify it and do with it as you please, I don't believe in licenses ;) http://www.ecl-labs.org/code.html Cheers, -Yuri. ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw to learn more. ------------------------------------------------------------------------
Current thread:
- Worminator - SMTP malware signature creation tool Yuri Gushin (Nov 29)