Mittwoch, 28. Januar 2015

Ruleset-Update: Signature for GHOST exploit-attempt in ARGS/HEADER/BODY


Credit Goes to Emerging-Threats, this Rule is inspired by ET-Rule 2020327

MainRule "rx:[\d\.]{1023}" "msg:Possible GHOST exploit-attempt in ARGS/HEADER/BODY" "mz:BODY|ARGS|HEADERS" "s:$ATTACK:8" id:42000414  ;

Updates has been pushed to Doxi-Rules already: 

Keine Kommentare:

Kommentar veröffentlichen