Rule History

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET EXPLOIT_KIT RedKit - Potential Payload Requested - /2Digit.html"; flow:established,to_server; urilen:8; http.uri; content:".html"; endswith; pcre:"/\/[0-9]{2}\.html$/"; http.user_agent; content:" Java/1"; classtype:exploit-kit; sid:2015990; rev:3; metadata:created_at 2012_12_06, signature_severity Major, updated_at 2020_04_22;)