FakeBO is an emulator for the BackOrifice/NetBus trojans/"remote

administration tools". It is able to "play along" with an incoming
request to get the user to reveal their intentions.
PR:		9261

5 files changed, 47 insertions, 0 deletions

diff --git a/security/fakebo/Makefile b/security/fakebo/Makefile
new file mode 100644
index 000000000000..2d40812d9aed
--- /dev/null
+++ b/security/fakebo/Makefile
@@ -0,0 +1,34 @@
+# New ports collection makefile for:   fakebo
+# Version required:    0.3.3
+# Date created:        16 March 1999
+# Whom:                Kris Kennaway <kris@FreeBSD.ORG>
+#
+# $Id$
+#
+
+DISTNAME=	fakebo
+PKGNAME=	fakebo-0.3.3
+CATEGORIES=	security
+MASTER_SITES=	http://yi.com/home/KosturjakVlatko/ \
+		ftp://ftp.c-com.net/pub/.10/LinuxBerg/files/console/ \
+		ftp://ftp.bitcon.no/.10/linux/linuxberg/files/console/ \
+		ftp://ftp.ist.utl.pt/Ftest/ftp/pub/linuxberg/files/console/
+EXTRACT_SUFX=	.tgz
+
+MAINTAINER=	kris@FreeBSD.ORG
+
+WRKSRC=		${WRKDIR}/${PKGNAME}
+
+MAN1=		fakebo.1
+
+do-install:
+	${INSTALL_PROGRAM} ${WRKSRC}/fakebo ${PREFIX}/bin/
+	${INSTALL_DATA} ${WRKSRC}/fakebo.conf ${PREFIX}/etc/
+	${INSTALL_MAN} ${WRKSRC}/fakebo.1 ${PREFIX}/man/man1/
+
+.if !defined(NOPORTDOCS)
+	${MKDIR} ${PREFIX}/share/doc/fakebo/
+	${INSTALL_MAN} ${WRKSRC}/custom.replies ${PREFIX}/share/doc/fakebo/
+.endif
+
+.include <bsd.port.mk>
diff --git a/security/fakebo/distinfo b/security/fakebo/distinfo
new file mode 100644
index 000000000000..ad15147152d9
--- /dev/null
+++ b/security/fakebo/distinfo
@@ -0,0 +1 @@
+MD5 (fakebo.tgz) = b4a8a61086d17cec8106732016982320
diff --git a/security/fakebo/pkg-comment b/security/fakebo/pkg-comment
new file mode 100644
index 000000000000..c4d5f32a9f80
--- /dev/null
+++ b/security/fakebo/pkg-comment
@@ -0,0 +1 @@
+A fake BackOrifice client emulator.
diff --git a/security/fakebo/pkg-descr b/security/fakebo/pkg-descr
new file mode 100644
index 000000000000..5c274eed7ecc
--- /dev/null
+++ b/security/fakebo/pkg-descr
@@ -0,0 +1,7 @@
+FakeBO emulates a BackOrifice client (a trojan which can be used to
+covertly monitor and alter Windows machines remotely), and can log
+attempted commands and packets, as well as providing configurable
+responses. Useful for catching script kiddies trying to find a hackable
+windows box, for providing evidence to their sysadmin, etc.
+
+http://yi.com/home/KosturjakVlatko/fakebo.htm
diff --git a/security/fakebo/pkg-plist b/security/fakebo/pkg-plist
new file mode 100644
index 000000000000..0dd96ca107d0
--- /dev/null
+++ b/security/fakebo/pkg-plist
@@ -0,0 +1,4 @@
+bin/fakebo
+etc/fakebo.conf
+share/doc/fakebo/custom.replies
+@dirrm share/doc/fakebo/