[Snort-sigs] Worminator - SMTP malware signature creation tool

Yuri Gushin yuri at ...3268...
Wed Nov 29 06:24:53 EST 2006


Hey guys,

I'd like to announce the release of a Win32 tool for easing/automating the
process of creating IDS/IPS signatures for SMTP based worms, providing a
comfortable GUI, including raw base64 variants and Snort signatures support.

This tool is aimed to make the lives of people who sign worms at IDS/IPS
 level easier, and it does that and more.

You may modify it and do with it as you please, I don't believe in licenses ;)

http://www.ecl-labs.org/code.html

Cheers,
 -Yuri.




More information about the Snort-sigs mailing list