#alert ip $EXTERNAL_NET $SHELLCODE_PORTS -> $HOME_NET any (msg:"ET EXPLOIT METASPLOIT BSD Bind shell (Countdown Encoded 1)"; content:"|6a 4d 59 e8 ff ff ff ff c1 5e 30 4c 0e 7 e2 fa 6b 63 5b 9d 57 6e 17 0a|"; classtype:shellcode-detect; reference:url,doc.emergingthreats.net/2010384; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_Metasploit_Encoders; sid:2010384; rev:2;)

Added 2009-12-01 15:31:31 UTC


#alert ip $EXTERNAL_NET $SHELLCODE_PORTS -> $HOME_NET any (msg:"ET EXPLOIT METASPLOIT BSD Bind shell (Countdown Encoded 1)"; content:"|6a 4d 59 e8 ff ff ff ff c1 5e 30 4c 0e 7 e2 fa 6b 63 5b 9d 57 6e 17 0a|"; classtype:shellcode-detect; reference:url,doc.emergingthreats.net/2010384; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/EXPLOIT/EXPLOIT_Metasploit_Encoders; sid:2010384; rev:2;)

Added 2009-12-01 15:31:31 UTC


#alert ip $EXTERNAL_NET $SHELLCODE_PORTS -> $HOME_NET any (msg:"ET EXPLOIT METASPLOIT BSD Bind shell (Countdown Encoded 1)"; content:"|6a 4d 59 e8 ff ff ff ff c1 5e 30 4c 0e 7 e2 fa 6b 63 5b 9d 57 6e 17 0a|"; classtype:shellcode-detect; sid:2010384; rev:1;)

Added 2009-12-01 14:32:19 UTC


#alert ip $EXTERNAL_NET $SHELLCODE_PORTS -> $HOME_NET any (msg:"ET EXPLOIT METASPLOIT BSD Bind shell (Countdown Encoded 1)"; content:"|6a 4d 59 e8 ff ff ff ff c1 5e 30 4c 0e 7 e2 fa 6b 63 5b 9d 57 6e 17 0a|"; classtype:shellcode-detect; sid:2010384; rev:1;)

Added 2009-12-01 14:30:42 UTC


Topic revision: r1 - 2009-12-01 - TWikiGuest
 
This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright © Emerging Threats