Versions (3)
Version DetailsCurrent
Rev: 3 • Jan 24, 2012, 12:00 PMET EXPLOIT_KIT Sakura Exploit Kit Landing Page Request
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET EXPLOIT_KIT Sakura Exploit Kit Landing Page Request"; flow:established,to_server; flowbits:set,et.exploitkitlanding; http.uri; content:".php?s="; pcre:"/^[0-9a-fA-F]{25}$/R"; reference:url,xylibox.blogspot.com/2012/01/sakura-exploit-pack-10.html; classtype:exploit-kit; sid:2014147; rev:3; metadata:created_at 2012_01_24, signature_severity Major, updated_at 2020_04_21;)
Jan 24, 2012, 12:00 PM
Apr 21, 2020, 12:00 PM
Sep 21, 2024, 3:00 AM
May 30, 2025, 12:04 AM
rules/emerging-exploit_kit.rules