ATTACK [PTsecurity] Spring Core RCE aka Spring4Shell Attempt

SID: 10007107Rev: 131 viewsHistory

Sourceptrules/open

CreatedJuly 24, 2025

UpdatedJuly 24, 2025

Classificationattempted-admin

alert http any any -> any any (msg:"ATTACK [PTsecurity] Spring Core RCE aka Spring4Shell Attempt"; flow:established; content:"pipeline.first.pattern"; nocase; content:"getRuntime"; nocase; distance:0; content:"exec"; nocase; pcre:"/(?:%25|%)(?:%7B|{)/i"; pcre:"/(?:%7D|})i/i"; reference:url, www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html; reference:url, rules.ptsecurity.com; classtype:attempted-admin; sid:10007107; rev:1;)

References

url	www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html
url	rules.ptsecurity.com

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!