alert http1 $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET WEB_SPECIFIC_APPS Piranha default passwd attempt"; flow:established,to_server; http.uri; content:"/piranha/secure/control.php3"; http.header; content:"Authorization|3a 20|Basic cGlyYW5oYTp"; fast_pattern; reference:bugtraq,1148; reference:cve,2000-0248; reference:nessus,10381; classtype:attempted-recon; sid:2002331; rev:8; metadata:created_at 2010_07_30, signature_severity Major, updated_at 2024_04_11;)