ET HUNTING Javascript Float64/Uint32 Typed-Array ArrayBuffer Aliasing

7.0.35.0SID: 2072454Rev: 1Enabled2 views
Sourceet/open
Fileemerging-hunting.rules
CreatedOctober 15, 2026
UpdatedOctober 15, 2026
Classificationunknown
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET HUNTING Javascript Float64/Uint32 Typed-Array ArrayBuffer Aliasing"; flow:established,to_client; content:"new ArrayBuffer|28|"; content:"new Float64Array|28|"; fast_pattern; content:"new Uint32Array|28|"; pcre:"/const\s*(?P<var>[^\s]+)\s*\x3d+\s*new\s*ArrayBuffer[^\x7d]*?Float64Array\x28(?P=var)[^\x7d]*?Uint32Array\x28(?P=var)/s"; classtype:unknown; sid:2072454; rev:1; metadata:attack_target Client_Endpoint, tls_state TLSDecrypt, created_at 2026_10_15, deployment Perimeter, confidence Medium, signature_severity Major, updated_at 2026_10_15;)

Metadata

attack targetClient_Endpoint
tls stateTLSDecrypt
created at2026_10_15
deploymentPerimeter
confidenceMedium
signature severityMajor
updated at2026_10_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!