TGI HUNT Suspicious Strings Inbound (msf jar payload)
Sourcetgreen/hunting
CreatedMarch 19, 2025
UpdatedMarch 19, 2025
Classificationbad-unknown
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"TGI HUNT Suspicious Strings Inbound (msf jar payload)"; flow:established; content:"metasploit.datSpawn="; content:"LHOST="; distance:0; content:"metasploit/PK"; distance:0; content:"metasploit/Payload.class"; distance:0; classtype:bad-unknown; sid:2610852; rev:1;)
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!