ET SHELLCODE Javascript Split String Unicode Heap Spray Attempt

7.0.35.0SID: 2012925Rev: 3Enabled3 views
Sourceet/open
Fileemerging-shellcode.rules
CreatedJune 2, 2011
UpdatedApril 9, 2024
Classificationshellcode-detect
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET SHELLCODE Javascript Split String Unicode Heap Spray Attempt"; flow:established,to_client; file.data; content:"|22|u|22 20|+|20 22|0|22 20|+|20 22|"; fast_pattern; content:"|22 20|+|20 22|"; distance:1; within:5; pcre:"/\x220\x22\x20\x2B\x20\x22[a-d]\x22\x20\x2B\x20\x22/smi"; classtype:shellcode-detect; sid:2012925; rev:3; metadata:created_at 2011_06_02, confidence High, signature_severity Major, updated_at 2024_04_09;)

Metadata

created at2011_06_02
confidenceHigh
signature severityMajor
updated at2024_04_09

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!