Rule History

SID: 2017080 • Source: et/open

Versions (2)

Version DetailsCurrent

Rev: 4 • Jul 2, 2013, 12:00 PM

Message:

ET INFO HTTP POST contains pasa= in cleartext

Rule:

alert http any any -> any any (msg:"ET INFO HTTP POST contains pasa= in cleartext"; flow:established,to_server; http.request_body; content:"pasa="; pcre:"/^(?!&)./R"; classtype:misc-activity; sid:2017080; rev:4; metadata:attack_target Client_Endpoint, created_at 2013_07_02, confidence Low, signature_severity Informational, updated_at 2023_05_01; target:src_ip;)

Created:

Jul 2, 2013, 12:00 PM

Updated:

May 1, 2023, 12:00 PM

DB Created:

Jul 2, 2013, 12:00 PM

DB Updated:

May 31, 2024, 9:00 PM

Filename:

rules/emerging-info.rules