ET ATTACK_RESPONSE webr00t WebShell Access

SID: 2017701Rev: 50 views
History
Sourceet/open
CreatedNovember 9, 2013
UpdatedAugust 18, 2020
Classificationtrojan-activity
alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET ATTACK_RESPONSE webr00t WebShell Access"; flow:established,to_server; http.uri; content:"/?webr00t="; reference:url,blog.sucuri.net/2013/11/case-study-analyzing-a-wordpress-attack-dissecting-the-webr00t-cgi-shell-part-i.html; classtype:trojan-activity; sid:2017701; rev:5; metadata:created_at 2013_11_09, signature_severity Major, updated_at 2020_08_18;)

References

urlblog.sucuri.net/2013/11/case-study-analyzing-a-wordpress-attack-dissecting-the-webr00t-cgi-shell-part-i.html

Metadata

created at2013_11_09
signature severityMajor
updated at2020_08_18

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!