ET WEB_SERVER CURL Command Specifying Output in HTTP Headers

SID: 2019308Rev: 40 views
History
Sourceet/open
CreatedSeptember 29, 2014
UpdatedSeptember 25, 2020
Classificationattempted-admin
alert http any any -> $HTTP_SERVERS any (msg:"ET WEB_SERVER CURL Command Specifying Output in HTTP Headers"; flow:established,to_server; http.header; content:"curl|20|"; fast_pattern; pcre:"/(?!^User-Agent\x3a)\bcurl\s[^\r\n]*?-(?:[Oo]|-(?:remote-name|output))[^\r\n]+(?:\x3b|&&)/m"; reference:url,blogs.akamai.com/2014/09/environment-bashing.html; classtype:attempted-admin; sid:2019308; rev:4; metadata:created_at 2014_09_29, signature_severity Minor, updated_at 2020_09_25;)

References

urlblogs.akamai.com/2014/09/environment-bashing.html

Metadata

created at2014_09_29
signature severityMinor
updated at2020_09_25

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!