Removed rule. This rule is known, but it is no longer present in its source. Showing the last known version.Removed: Jul 5, 2026, 4:07 AM

THE HUNTERS LEDGER - Inkognito Operator X-Admin-Token in CORS Allow-Headers Response

SID: 1900025Rev: 1Enabled6 viewsHistory
Filehunters-ledger.rules
CreatedMay 16, 2026
UpdatedMay 16, 2026
Classificationtrojan-activity
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"THE HUNTERS LEDGER - Inkognito Operator X-Admin-Token in CORS Allow-Headers Response"; flow:established,to_client; http.header; content:"Access-Control-Allow-Headers"; nocase; http.header; content:"X-Admin-Token"; nocase; sid:1900025; rev:1; classtype:trojan-activity; metadata:affected_product Web_Browser, attack_target Client_Endpoint, created_at 2026_05_16, deployment Perimeter, signature_severity Major, tag Inkognito;)

Metadata

affected productWeb_Browser
attack targetClient_Endpoint
created at2026_05_16
deploymentPerimeter
signature severityMajor
tagInkognito

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!