ET WEB_SERVER WGET Command Specifying Output in HTTP Headers
Sourceet/open
Fileemerging-web_server.rules
CreatedSeptember 29, 2014
UpdatedMay 5, 2024
Classificationattempted-admin
alert http1 any any -> $HTTP_SERVERS any (msg:"ET WEB_SERVER WGET Command Specifying Output in HTTP Headers"; flow:established,to_server ; http.header; content:"wget|20|"; fast_pattern; pcre:"/(?!^User-Agent\x3a)\bwget\s[^\r\n]+(?:\x3b|&&)/m" ; reference:url,blogs.akamai.com/2014/09/environment-bashing.html ; classtype:attempted-admin; sid:2019309; rev:5; metadata:created_at 2014_09_29, signature_severity Minor, updated_at 2024_05_05;)
References
Metadata
created at2014_09_29
signature severityMinor
updated at2024_05_05
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!