ET WEB_SERVER lwp-download Command Specifying Output in HTTP Headers
Sourceet/open
CreatedSeptember 29, 2014
UpdatedSeptember 25, 2020
Classificationattempted-admin
alert http any any -> $HTTP_SERVERS any (msg:"ET WEB_SERVER lwp-download Command Specifying Output in HTTP Headers"; flow:established,to_server; http.header; content:"lwp-download|20|"; fast_pattern; pcre:"/(?!^User-Agent\x3a)\blwp-download\s[^\r\n]+(?:\x3b|&&)/m"; reference:url,blogs.akamai.com/2014/09/environment-bashing.html; classtype:attempted-admin; sid:2019310; rev:4; metadata:created_at 2014_09_29, signature_severity Minor, updated_at 2020_09_25;)
References
Metadata
created at2014_09_29
signature severityMinor
updated at2020_09_25
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!