ET SCAN Possible WafWoof Web Application Firewall Detection Scan

SID: 2011720Rev: 50 viewsHistory

Sourceet/open

CreatedJuly 30, 2010

UpdatedMay 4, 2020

Classificationattempted-recon

alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET SCAN Possible WafWoof Web Application Firewall Detection Scan"; flow:established,to_server; http.method; content:"GET"; http.uri; content:"/<invalid>hello.html"; reference:url,code.google.com/p/waffit/; classtype:attempted-recon; sid:2011720; rev:5; metadata:created_at 2010_07_30, confidence Medium, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_05_04;)

References

url	code.google.com/p/waffit/

Metadata

created at2010_07_30

confidenceMedium

signature severityInformational

tagDescription_Generated_By_Proofpoint_Nexus

updated at2020_05_04

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!