""ET EXPLOIT xp_enumerrorlogs access""

SID: 2010001

Revision: 4

Class Type: attempted-user

Metadata: created_at 2010_07_30, updated_at 2018_01_09

Reference:

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $SQL_SERVERS

Destination Port: 1433

Flow: to_server,established

Contents:

  • Value: "x|00|p|00|_|00|e|00|n|00|u|00|m|00|e|00|r|00|r|00|o|00|r|00|l|00|o|00|g|00|s|00|"

Within:

PCRE:

Special Options:

  • nocase

source