IDS mailing list archives

Worminator - SMTP malware signature creation tool


From: Yuri Gushin <yuri () ecl-labs org>
Date: Wed, 29 Nov 2006 13:28:45 +0200

Hey guys,

I'd like to announce the release of a Win32 tool for easing/automating the
process of creating IDS/IPS signatures for SMTP based worms, providing a
comfortable GUI, including raw base64 variants and Snort signatures support.

This tool is aimed to make the lives of people who sign worms at IDS/IPS level 
easier, and it does that and more.

You may modify it and do with it as you please, I don't believe in licenses ;)

http://www.ecl-labs.org/code.html

Cheers,
 -Yuri.

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------


Current thread: