fe7ch

dionaea does capture payloads that uploaded via DoublePulsar backdoor, but I'm not sure if it could play well with initial EthernalBlue exploit. Maybe @gento could answer it.

I think it could be improved further. I run dionaea with the following command: `bin/dionaea -l all,-debug -L '*' -u dionaea -g dionaea -c etc/dionaea/dionaea.cfg -p var/run/dionaea.pid` After merging of...

As @HermanusF and @bontchev mentioned, this functionality should be optional, so some command line/config option should be present to disable it if needed. Imho it should be turned on by...