Versions (3)
Version DetailsCurrent
Rev: 3 • Jul 7, 2012, 12:00 PMET CURRENT_EVENTS g01pack - 32Char.php by Java Client
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET CURRENT_EVENTS g01pack - 32Char.php by Java Client"; flow:established,to_server; urilen:52<>130; http.uri; content:".php?"; pcre:"/^\/[a-z]{1,10}\/[a-z0-9]{32}\.php\?/"; http.user_agent; content:"Java/1"; fast_pattern; classtype:exploit-kit; sid:2015042; rev:3; metadata:created_at 2012_07_07, signature_severity Informational, updated_at 2024_02_19;)
Jul 7, 2012, 12:00 PM
Feb 19, 2024, 12:00 PM
Sep 21, 2024, 3:00 AM
May 30, 2025, 12:04 AM
rules/emerging-current_events.rules