TGI HUNT DS Metasploit User Agent String

SID: 2610548Rev: 116 views
History
Sourcetgreen/hunting
CreatedMarch 19, 2025
UpdatedMarch 19, 2025
Classificationtrojan-activity
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"TGI HUNT DS Metasploit User Agent String"; flow:to_server,established; content:"Mozilla/4.0 (compatible\; MSIE 6.1\; Windows NT)|0d 0a|"; http_user_agent; classtype:trojan-activity; reference:url,blog.didierstevens.com/2015/03/16/quickpost-metasploit-user-agent-strings/; sid:2610548; rev:1;)

References

urlblog.didierstevens.com/2015/03/16/quickpost-metasploit-user-agent-strings/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!