ET EXPLOIT_KIT Java File Sent With X-Powered By HTTP Header - Common In Exploit Kits - Suricata Rule 2017637 (et/open)

ET EXPLOIT_KIT Java File Sent With X-Powered By HTTP Header - Common In Exploit Kits

7.0.3 5.0SID: 2017637Rev: 5Enabled0 views

Fileemerging-exploit_kit.rules

CreatedOctober 28, 2013

UpdatedApril 7, 2024

Classificationexploit-kit

alert http1 $EXTERNAL_NET any -> $HOME_NET any (msg:"ET EXPLOIT_KIT Java File Sent With X-Powered By HTTP Header - Common In Exploit Kits"; flow:established,to_client; http.content_type; content:"application/java-archive"; fast_pattern; http.header; content:"X-Powered-By|3a 20|PHP/"; file.data; content:"PK"; within:2; classtype:exploit-kit; sid:2017637; rev:5; metadata:created_at 2013_10_28, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_04_07;)

Metadata

created at2013_10_28

signature severityMajor

tagDescription_Generated_By_Proofpoint_Nexus

updated at2024_04_07

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!