REMOTE [PTsecurity] PupyRAT HTTP Echo Scan

SID: 10006391Rev: 333 views
History
Sourceptrules/open
CreatedOctober 9, 2025
UpdatedOctober 9, 2025
Classificationtrojan-activity
alert http any any -> any any (msg:"REMOTE [PTsecurity] PupyRAT HTTP Echo Scan"; flow:established, to_server; content:"/?echo=%DE%AD%BE%EF"; http_uri; isdataat:!2, relative; content:"GET"; http_method; reference:url, https://github.com/n1nj4sec/pupy; reference:url, rules.ptsecurity.com; classtype:trojan-activity; sid:10006391; rev:3;)

References

urlhttps://github.com/n1nj4sec/pupy
urlrules.ptsecurity.com

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!