ET SCAN SQLNinja Attempt To Create xp_cmdshell Session

7.0.35.0SID: 2009044Rev: 6Enabled1 views
Sourceet/open
Fileemerging-scan.rules
CreatedJuly 30, 2010
UpdatedMarch 6, 2024
Classificationattempted-admin
alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET SCAN SQLNinja Attempt To Create xp_cmdshell Session"; flow:established,to_server; content:"?param=a"; content:"exec%20master%2E%2Exp%5Fcmdshell%20%27cmd%20%2FC%20%25TEMP"; distance:2; reference:url,sqlninja.sourceforge.net/index.html; classtype:attempted-admin; sid:2009044; rev:6; metadata:created_at 2010_07_30, confidence Medium, signature_severity Informational, updated_at 2024_03_06;)

References

urlsqlninja.sourceforge.net/index.html

Metadata

created at2010_07_30
confidenceMedium
signature severityInformational
updated at2024_03_06

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!