Rule History

SID: 2048488 • Source: et/open

Versions (6)

Version DetailsCurrent

Rev: 1 • Oct 6, 2023, 12:00 PM

Message:

ET EXPLOIT_KIT JavaScript DOS Injection

Rule:

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET EXPLOIT_KIT JavaScript DOS Injection"; flow:established,to_client; content:"var|20|targets|20 3d 20 7b|"; content:"CONCURRENCY_LIMIT"; distance:0; content:"async|20|function|20|fetchWithTimeout"; content:"async|20|function|20|flood|28|target|29|"; fast_pattern; classtype:exploit-kit; sid:2048488; rev:1; metadata:affected_product Web_Browsers, attack_target Client_Endpoint, created_at 2023_10_06, deployment Perimeter, deployment SSLDecrypt, performance_impact Low, confidence High, signature_severity Major, tag DOS, updated_at 2023_10_06, reviewed_at 2024_12_24;)

Created:

Oct 6, 2023, 12:00 PM

Updated:

Oct 6, 2023, 12:00 PM

DB Created:

Sep 21, 2024, 3:00 AM

DB Updated:

Sep 21, 2024, 3:00 AM

Filename:

rules/emerging-exploit_kit.rules