Benutzer-Werkzeuge

Webseiten-Werkzeuge


security:ips:suricata

Dies ist eine alte Version des Dokuments!


Suricata Rules

Directory Traversal

alert http any any -> 192.168.6.4 80 (msg:"Directory traversal attempt"; flow:to_server,established; content:"/..%2f/"; http_raw_uri; classtype:web-application-attack; sid:1000001; rev:1;)
drop http any any -> 192.168.6.4 80 (msg:"Directory traversal attempt"; flow:to_server,established; content:"/..%2f/"; http_raw_uri; classtype:web-application-attack; sid:1000001; rev:1;)

Webshell

...
security/ips/suricata.1620283372.txt.gz · Zuletzt geändert: von rsi

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki