Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Andy PHP Knowledgebase SQL Injection Attempt pdfgen.php pdfa UPDATE rev 4 2020-04-19
suricata ET WEB_SPECIFIC_APPS coRED CMS rubID Parameter SELECT FROM SQL Injection Attempt rev 5 2020-04-19
suricata ET WEB_SPECIFIC_APPS WP Forum Server wordpress plugin SQL Injection Attempt -- feed.php topic DELETE rev 4 2020-04-19
snort ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
snort ET WEB_SERVER WSO 2.6 Webshell Accessed on Internal Compromised Server rev 2 2020-04-17
snort ET WEB_SERVER Generic PHP Mailer Accessed on Internal Compromised Server rev 2 2020-04-17
snort ET WEB_SERVER Generic PHP Mailer Accessed on Internal Compromised Server rev 2 2020-04-17
snort ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
snort ET WEB_SERVER Generic PHP Mailer Accessed on Internal Compromised Server rev 2 2020-04-17
snort ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
snort ET WEB_SERVER Generic PHP Mailer Accessed on Internal Compromised Server rev 2 2020-04-17
snort ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server rev 2 2020-04-17
snort ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
snort ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
snort ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server rev 2 2020-04-17
snort ET WEB_SERVER Generic PHP Mailer Accessed on Internal Compromised Server rev 2 2020-04-17
snort ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
suricata ET WEB_SPECIFIC_APPS NetClassifieds Premium Edition SQL Injection Attempt -- ViewCat.php s_user_id UNION SELECT rev 9 2020-04-17
suricata ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
suricata ET WEB_SPECIFIC_APPS NetClassifieds Premium Edition SQL Injection Attempt -- ViewCat.php s_user_id DELETE rev 9 2020-04-17
suricata ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
suricata ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
suricata ET WEB_CLIENT WSO 2.6 Webshell Accessed on External Compromised Server rev 2 2020-04-17
suricata ET WEB_SPECIFIC_APPS NetVIOS Portal SQL Injection Attempt -- page.asp NewsID UNION SELECT rev 9 2020-04-17
suricata ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentwebsite INSERT rev 8 2020-04-17
suricata ET WEB_SPECIFIC_APPS NetVIOS Portal SQL Injection Attempt -- page.asp NewsID DELETE rev 9 2020-04-17
suricata ET WEB_SERVER Generic PHP Mailer Accessed on Internal Compromised Server rev 2 2020-04-17
suricata ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentmail SELECT rev 8 2020-04-17
suricata ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentname UPDATE rev 8 2020-04-17
suricata ET WEB_SPECIFIC_APPS NetClassifieds Premium Edition SQL Injection Attempt -- ViewCat.php s_user_id UPDATE rev 9 2020-04-17
suricata ET WEB_SPECIFIC_APPS NetVIOS Portal SQL Injection Attempt -- page.asp NewsID UPDATE rev 9 2020-04-17
suricata ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
suricata ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentwebsite DELETE rev 8 2020-04-17
suricata ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server rev 2 2020-04-17
suricata ET WEB_SPECIFIC_APPS Neuron Blog SQL Injection Attempt -- addcomment2.php commentwebsite SELECT rev 8 2020-04-17
suricata ET WEB_CLIENT Generic PHP Mailer Accessed on External Compromised Server rev 2 2020-04-17
suricata ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server rev 2 2020-04-17
suricata ET WEB_SERVER Generic PHP Mailer Accessed on Internal Compromised Server rev 2 2020-04-17
suricata ET WEB_SPECIFIC_APPS NetVIOS Portal SQL Injection Attempt -- page.asp NewsID INSERT rev 10 2020-04-17
suricata ET WEB_SERVER WSO 2.6 Webshell Accessed on Internal Compromised Server rev 2 2020-04-17