pcap2curl - replaying URLS from a pcap

Johannes Ullrich of SANS has an interesting tool that uses scapy to read a pcap and emit the curl commands to replay it.  

This has a lot of possibilities, not the least are learning scapy

https://isc.sans.edu/diary/pcap2curl%3A+Turning+a+pcap+file+into+a+set+of+cURL+commands+for+%22replay%22+/22900



Perry

SANS talks about fake DDOS extortions

Apparently the latest thing is fake DDOS extortions.  Unfortunately all they have to do is make good on them - and what's the risk?  They're already opening up their bitcoin address to tracing.  Let's see what happens.

Johannes at SANS would like some more samples too.

https://isc.sans.edu/forums/diary/Fake+DDoS+Extortions+Continue+Please+Forward+Us+Any+Threats+You+Have+Received/22550/

Perry