Rule History

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET EXPLOIT_KIT Redirection to driveby Page Home index.php"; flow:established,from_server; content:"/Home/index.php|22| width=1 height=1 scrolling=no></iframe>"; classtype:exploit-kit; sid:2013436; rev:4; metadata:affected_product Any, attack_target Client_Endpoint, created_at 2011_08_19, deployment Perimeter, signature_severity Major, tag DriveBy, updated_at 2019_07_26;)