Announce: mydoom.pl (honeyd script)

mydoom.pl is a simple Perl script, that works with honeyd, to emulate
the backdoor installed by the Mydoom virus. It can:

    * log connection attempts to the backdoor; (3127/TCP, 3128/TCP,
      1080/TCP, 10080/TCP, etc)
    * save uploaded files;
    * log attempts to use the Mydoom backdoor proxy capability
      (socks4).

mydoom.pl tarball and README are available at:

     http://www.honeynet.org.br/tools/

Have fun,
Klaus.
Received on Mon Feb 16 2004 - 17:19:44 PST