ET SHELLCODE Possible %u0d0d%u0d0d UTF-16 Heap Spray Attempt
Sourceet/open
Fileemerging-shellcode.rules
CreatedJune 9, 2011
UpdatedApril 9, 2024
Classificationshellcode-detect
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET SHELLCODE Possible %u0d0d%u0d0d UTF-16 Heap Spray Attempt"; flow:established,to_client ; file.data; content:"%u0d0d%u0d0d"; nocase; reference:url,www.darkreading.com/security/vulnerabilities/221901428/index.html ; classtype:shellcode-detect; sid:2012968; rev:4; metadata:created_at 2011_06_09, confidence Medium, signature_severity Major, updated_at 2024_04_09;)
Metadata
created at2011_06_09
confidenceMedium
signature severityMajor
updated at2024_04_09
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!