Signature for GHOST exploit-attempt in ARGS/HEADER/BODY
12 views
Skip to first unread message
mex
Jan 28, 2015, 6:59:12 PM1/28/15
to naxsi-discuss
Credit Goes to Emerging-Threats, this Rule is inspired by ET-Rule 2020327
MainRule "rx:[\d\.]{1023}" "msg:Possible GHOST exploit-attempt in
ARGS/HEADER/BODY" "mz:BODY|ARGS|HEADERS" "s:$ATTACK:8" id:42000414 ;
Updates has been pushed to Doxi-Rules already:
- https://bitbucket.org/lazy_dogtown/doxi-rules/src
cheers,
mex
MainRule "rx:[\d\.]{1023}" "msg:Possible GHOST exploit-attempt in
ARGS/HEADER/BODY" "mz:BODY|ARGS|HEADERS" "s:$ATTACK:8" id:42000414 ;
Updates has been pushed to Doxi-Rules already:
- https://bitbucket.org/lazy_dogtown/doxi-rules/src
cheers,
mex
Reply all
Reply to author
Forward
0 new messages