ET WEB_SERVER Common JSP WebShell String Observed in HTTP Header M1

7.0.35.0SID: 2035671Rev: 3Enabled4 views
Sourceet/open
Fileemerging-web_server.rules
CreatedMarch 31, 2022
UpdatedMarch 8, 2024
Classificationattempted-admin
alert http any any -> [$HOME_NET,$HTTP_SERVERS] any (msg:"ET WEB_SERVER Common JSP WebShell String Observed in HTTP Header M1"; flow:established,to_server; http.header; content:"request.getParameter|28|"; fast_pattern; nocase; classtype:attempted-admin; sid:2035671; rev:3; metadata:created_at 2022_03_31, confidence Medium, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_08;)

Metadata

created at2022_03_31
confidenceMedium
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_03_08

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!