ET WEB_SERVER Common JSP WebShell String Observed in HTTP Header M2
Sourceet/open
CreatedMarch 31, 2022
UpdatedApril 19, 2023
Classificationattempted-admin
alert http any any -> [$HOME_NET,$HTTP_SERVERS] any (msg:"ET WEB_SERVER Common JSP WebShell String Observed in HTTP Header M2"; flow:to_server,established; http.header; content:"executeCmd|28|request.getParameter|28|"; fast_pattern; nocase; classtype:attempted-admin; sid:2035672; rev:2; metadata:created_at 2022_03_31, confidence Medium, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2023_04_19;)
Metadata
created at2022_03_31
confidenceMedium
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2023_04_19
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!