TGI HUNT POST Without Referer Header
Sourcetgreen/hunting
Filehunting.rules
CreatedMarch 19, 2025
UpdatedMarch 19, 2025
Classificationbad-unknown
alert http any any -> any any (msg:"TGI HUNT POST Without Referer Header"; flow:established,to_server ; content:"POST"; http_method; http_header_names; content:!"Referer"; threshold:type limit, track by_src, seconds 180, count 1 ; http_content_type; content:!"application/ocsp-response"; classtype:bad-unknown; sid:2610380; rev:1;)
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!