Hey guys, I'd like to announce the release of a Win32 tool for easing/automating the process of creating IDS/IPS signatures for SMTP based worms, providing a comfortable GUI, including raw base64 variants and Snort signatures support.
This tool is aimed to make the lives of people who sign worms at IDS/IPS level easier, and it does that and more. You may modify it and do with it as you please, I don't believe in licenses ;) http://www.ecl-labs.org/code.html Cheers, -Yuri. ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw to learn more. ------------------------------------------------------------------------
