Rule History

SID: 10006023 • Source: ptrules/open

Versions (7)

Version DetailsCurrent

Rev: 4 • Sep 4, 2025, 8:46 AM

Message:

TOOLS [PTsecurity] Burp Suite tool activity. polling.oastify.com or polling.portswigger.net resolve

Rule:

alert dns any any -> any any (msg:"TOOLS [PTsecurity] Burp Suite tool activity. polling.oastify.com or polling.portswigger.net resolve"; dns_query; content:"polling."; pcre:"/^(oastify|portswigger)\.(com|net)/Ri"; threshold:type limit, track by_src, count 1, seconds 300; reference:url, rules.ptsecurity.com; classtype:bad-unknown; sid:10006023; rev:4;)

Created:

Sep 4, 2025, 8:46 AM

Updated:

Sep 4, 2025, 8:46 AM

DB Created:

Oct 16, 2025, 10:34 AM

DB Updated:

Oct 16, 2025, 10:34 AM

Filename:

rules/ptopen-tools.rules