Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SPECIFIC_APPS PHP-Nuke Surveys pollID parameter UNION SELECT SQL Injection Attempt rev 2 2011-04-11
snort ET WEB_SPECIFIC_APPS Andy PHP Knowledgebase SQL Injection Attempt pdfgen.php pdfa DELETE rev 2 2011-04-11
snort ET WEB_SPECIFIC_APPS Andy PHP Knowledgebase SQL Injection Attempt pdfgen.php pdfa UNION SELECT rev 2 2011-04-11
snort ET WEB_SPECIFIC_APPS eyeOS file Parameter Local File Inclusion Attempt rev 2 2011-04-11
snort ET WEB_SPECIFIC_APPS Andy PHP Knowledgebase SQL Injection Attempt pdfgen.php pdfa UPDATE rev 2 2011-04-11
snort ET POLICY Windows-Based OpenSSL Tunnel Outbound rev 5 2011-04-11
snort ET WEB_SPECIFIC_APPS Andy PHP Knowledgebase SQL Injection Attempt pdfgen.php pdfa INSERT rev 2 2011-04-11
snort ET WEB_SPECIFIC_APPS vBulletin cChatBox messageid Parameter DELETE FROM SQL Injection Attempt rev 2 2011-04-11
snort ET WEB_SPECIFIC_APPS PHP-Nuke Surveys pollID parameter DELETE FROM SQL Injection Attempt rev 2 2011-04-11
snort ET WEB_SPECIFIC_APPS vBulletin cChatBox messageid Parameter UNION SELECT SQL Injection Attempt rev 2 2011-04-11
snort ET WEB_SPECIFIC_APPS PHP-Nuke Surveys pollID parameter SELECT FROM SQL Injection Attempt rev 2 2011-04-11
snort ET WEB_SPECIFIC_APPS PHP-Nuke Surveys pollID parameter INSERT INTO SQL Injection Attempt rev 2 2011-04-11
snort ET WEB_SPECIFIC_APPS vBulletin cChatBox messageid Parameter UPDATE SET SQL Injection Attempt rev 2 2011-04-11
snort ET WEB_SPECIFIC_APPS PHP-Nuke Surveys pollID parameter UPDATE SET SQL Injection Attempt rev 2 2011-04-11
snort ET WEB_SPECIFIC_APPS vBulletin cChatBox messageid Parameter INSERT INTO SQL Injection Attempt rev 2 2011-04-11
snort ET POLICY Windows-Based OpenSSL Tunnel Connection Outbound 2 rev 4 2011-04-11
snort ET POLICY Dropbox Client Broadcasting rev 3 2011-04-09
snort ET USER_AGENTS Suspicious User-Agent Sample rev 3 2011-04-01
snort ET SCAN Havij SQL Injection Tool User-Agent Inbound rev 2 2011-03-31
snort ET SCAN Havij SQL Injection Tool User-Agent Outbound rev 2 2011-03-31
snort ET WEB_SPECIFIC_APPS mySeatXT SQL Injection Attempt autocomplete.php field UPDATE rev 2 2011-03-29
snort ET WEB_SPECIFIC_APPS mySeatXT SQL Injection Attempt autocomplete.php field DELETE rev 3 2011-03-29
snort ET WEB_SPECIFIC_APPS mySeatXT SQL Injection Attempt autocomplete.php field UNION SELECT rev 3 2011-03-29
snort ET WEB_SPECIFIC_APPS coRED CMS rubID Parameter INSERT INTO SQL Injection Attempt rev 3 2011-03-25
snort ET WEB_SPECIFIC_APPS Shape Web Solutions imprimir.php UNION SELECT SQL Injection Attempt rev 3 2011-03-25
snort ET WEB_SPECIFIC_APPS Shape Web Solutions imprimir.php UPDATE SET SQL Injection Attempt rev 3 2011-03-25
snort ET WEB_SPECIFIC_APPS mySeatXT SQL Injection Attempt autocomplete.php field INSERT rev 3 2011-03-25
snort ET WEB_SPECIFIC_APPS coRED CMS rubID Parameter UPDATE SET SQL Injection Attempt rev 3 2011-03-25
snort ET WEB_SPECIFIC_APPS coRED CMS rubID Parameter UNION SELECT SQL Injection Attempt rev 3 2011-03-25
snort ET WEB_SPECIFIC_APPS Shape Web Solutions imprimir.php SELECT FROM SQL Injection Attempt rev 3 2011-03-25
snort ET WEB_SPECIFIC_APPS coRED CMS rubID Parameter DELETE FROM SQL Injection Attempt rev 4 2011-03-25
snort ET WEB_SPECIFIC_APPS Shape Web Solutions imprimir.php INSERT INTO SQL Injection Attempt rev 2 2011-03-25
snort ET WEB_SPECIFIC_APPS jQuery Mega Menu Wordpress Plugin Local File Inclusion Attempt rev 3 2011-03-25
snort ET WEB_SPECIFIC_APPS mySeatXT SQL Injection Attempt autocomplete.php field SELECT rev 3 2011-03-25
snort ET WEB_SPECIFIC_APPS Shape Web Solutions imprimir.php DELETE FROM SQL Injection Attempt rev 3 2011-03-25
snort ET TROJAN Tibs Trojan Downloader rev 5 2011-03-21
snort ET USER_AGENTS Suspicious User-Agent Moxilla rev 4 2011-03-17
snort ET WEB_CLIENT Android Webkit removeChild Use-After-Free Remote Code Execution Attempt rev 1 2011-03-16
snort ET POLICY Akamai NetSession Interface PUTing data rev 1 2011-03-16
snort ET WEB_SPECIFIC_APPS Constructr CMS Injection Attempt -- constructrXmlOutput.content.xml.php page_id DELETE rev 2 2011-03-15