2006913 < Main < EmergingThreats

Main Web>2006913 (2008-01-08, TWikiGuest) (raw view)
 <h2>
 

#alert udp $EXTERNAL_NET 53 -> $HOME_NET any (msg:"BLEEDING-EDGE CURRENT EVENTS DNS-Rebinding Attack 192.168.x.x/16 (local IP from remote DNS Server)"; content: "|c0 0c 00 01 00 01|"; content: "|00 04 c0 a8|"; within:4; distance:4; reference:url,crypto.stanford.edu/dns/; classtype:misc-attack; sid:2006913; rev:4;)

</h2>

Added 2007-10-10 06:31:36 UTC


 %COMMENT{type="threadmode" default="Please enter documentation, comments, false positives, or concerns with this signature. Press the Attach button below to add samples or Pcaps." button="Add to Documentation" }%
 
 <hr>
 


 <h2>
 

#alert udp $EXTERNAL_NET 53 -> $HOME_NET any (msg:"BLEEDING-EDGE CURRENT EVENTS DNS-Rebinding Attack 192.168.x.x/16 (local IP from remote DNS Server)"; content: "|c0 0c 00 01 00 01|"; content: "|00 04 c0 a8|"; within:4; distance:4; reference:url,crypto.stanford.edu/dns/; classtype:misc-attack; sid:2006913; rev:4;)

</h2>

Added 2007-10-10 06:31:36 UTC


 
 <hr>
 


 <h2>
 

alert udp $EXTERNAL_NET 53 -> $HOME_NET any (msg:"BLEEDING-EDGE CURRENT EVENTS DNS-Rebinding Attack 192.168.x.x/16 (local IP from remote DNS Server)"; content: "|c0 0c 00 01 00 01|"; content: "|00 04 c0 a8|"; within:4; distance:4; reference:url,crypto.stanford.edu/dns/; classtype:misc-attack; sid:2006913; rev:4;)

</h2>

Added 2007-08-11 12:25:12 UTC


 
 
 <hr>
 
 
 


 <h2>
 

alert udp $EXTERNAL_NET 53 -> $HOME_NET any (msg:"BLEEDING-EDGE CURRENT EVENTS DNS-Rebinding Attack 192.168.x.x/16 (local IP from remote DNS Server)"; content: "|c0 0c 00 01 00 01|"; content: "|00 04 c0 a8|"; within:4; distance:4; metadata:service dns; reference:url,crypto.stanford.edu/dns/; classtype:misc-attack; sid:2006913; rev:3;)

</h2>

Added 2007-08-11 05:31:45 UTC


 
 
 <hr>
 
 
 


 <h2>
 

alert udp $EXTERNAL_NET 53 -> $HOME_NET any (msg:"BLEEDING-EDGE CURRENT EVENTS DNS-Rebinding Attack 192.168.x.x/16 (local IP from remote DNS Server)"; content: "|c0 0c 00 01 00 01|"; content: "|00 04 c0 a8|"; within:4; distance:4; metadata:service dns; reference: http://crypto.stanford.edu/dns/; classtype:misc-attack; sid:2006913; rev:2;)

</h2>

Added 2007-08-10 01:20:19 UTC


 
 
 <hr>
Topic revision: r1 - 2008-01-08 - TWikiGuest
Main
User Reference
ATasteOfTWiki
TextFormattingRules
Signature Reference
WebRss Feed
EmergingFAQ