| snort |
ET WEB_SERVER WebShell - GODSpy - GODSpy title |
rev 2 |
2013-07-02 |
| snort |
ET WEB_SERVER WebShell - GODSpy - Cookie |
rev 1 |
2013-07-02 |
| snort |
ET WEB_SERVER WebShell - GODSpy - GOD Hacker |
rev 1 |
2013-07-02 |
| snort |
ET WEB_SERVER WebShell - GODSpy - Auth Prompt |
rev 2 |
2013-07-02 |
| snort |
ET WEB_SERVER WebShell - Pouya - URI - raiz |
rev 1 |
2013-07-02 |
| snort |
ET CURRENT_EVENTS Redirect to DotkaChef EK Landing |
rev 2 |
2013-06-29 |
| snort |
ET WEB_SPECIFIC_APPS MoinMoin twikidraw Action Traversal File Upload |
rev 1 |
2013-06-28 |
| snort |
ET CURRENT_EVENTS Neutrino Exploit Kit Redirector To Landing Page |
rev 1 |
2013-06-27 |
| snort |
ET TROJAN Win32/Sisproc Variant POST to CnC Server |
rev 3 |
2013-06-27 |
| snort |
ET TROJAN General Win32 Backdoor Checkin POST |
rev 5 |
2013-06-27 |
| snort |
ET TROJAN W32/118GotYourNo Reporting to CnC |
rev 3 |
2013-06-27 |
| snort |
ET TROJAN AntiVirus exe Download Likely FakeAV Install |
rev 4 |
2013-06-27 |
| snort |
ET TROJAN FakeAV oms.php Data Post |
rev 4 |
2013-06-27 |
| snort |
ET MOBILE_MALWARE Android.Zitmo Forwarding SMS Message to CnC Server |
rev 3 |
2013-06-27 |
| snort |
ET EXPLOIT SolusVM 1.13.03 Access to solusvmc-node setuid bin |
rev 3 |
2013-06-25 |
| snort |
ET TROJAN Win32/Comisproc Checkin |
rev 9 |
2013-06-25 |
| snort |
ET CURRENT_EVENTS Possible Java Applet JNLP applet_ssv_validated in Base64 |
rev 4 |
2013-06-25 |
| snort |
ET WEB_SERVER WebShell Generic - ELF File Uploaded |
rev 1 |
2013-06-22 |
| snort |
ET TROJAN Drive Receiving UDP DDoS instructions |
rev 2 |
2013-06-22 |
| snort |
ET TROJAN Drive Receiving IP2 DDoS instructions |
rev 3 |
2013-06-22 |
| snort |
ET TROJAN Drive Receiving GET DDoS instructions |
rev 2 |
2013-06-22 |
| snort |
ET TROJAN Drive Receiving POST2 DDoS instructions |
rev 2 |
2013-06-22 |
| snort |
ET TROJAN Drive Receiving POST1 DDoS instructions |
rev 4 |
2013-06-22 |
| snort |
ET TROJAN Drive Receiving IP DDoS instructions |
rev 2 |
2013-06-22 |
| snort |
ET TROJAN Win32/Comotor.A!dll Reporting 1 |
rev 4 |
2013-06-20 |
| snort |
ET ATTACK_RESPONSE Net User Command Response |
rev 3 |
2013-06-18 |
| snort |
ET TROJAN Unknown Webserver Backdoor |
rev 1 |
2013-06-18 |
| snort |
ET TROJAN TripleNine RAT Checkin |
rev 4 |
2013-06-15 |
| snort |
ET EXPLOIT Possible 2012-1533 altjvm RCE via JNLP command injection |
rev 1 |
2013-06-13 |
| snort |
ET WEB_SERVER Possible SQLi xp_cmdshell POST body |
rev 3 |
2013-06-13 |
| snort |
ET TROJAN Win32/Tobfy.S |
rev 3 |
2013-06-12 |
| snort |
ET TROJAN EXE Download When Server Claims To Send Audio File - Must Be Win32 |
rev 5 |
2013-06-11 |
| snort |
ET TROJAN Alina Server Response Code |
rev 3 |
2013-06-08 |
| snort |
ET TROJAN KeyBoy Backdoor Login |
rev 2 |
2013-06-08 |
| snort |
ET INFO Executable Served From /tmp/ Directory - Malware Hosting Behaviour |
rev 1 |
2013-06-07 |
| snort |
ET WEB_SERVER allow_url_include PHP config option in uri |
rev 3 |
2013-06-06 |
| snort |
ET WEB_SERVER disable_functions PHP config option in uri |
rev 4 |
2013-06-06 |
| snort |
ET WEB_SERVER suhosin.simulation PHP config option in uri |
rev 3 |
2013-06-06 |
| snort |
ET WEB_SERVER open_basedir PHP config option in uri |
rev 3 |
2013-06-06 |
| snort |
ET TROJAN Win32/Travnet.A Checkin |
rev 4 |
2013-06-06 |