""ET SHELLCODE Possible Encoded %90 NOP SLED""

SID: 2012112

Revision: 2

Class Type: shellcode-detect

Metadata: created_at 2010_12_28, tag possible_exploitation, updated_at 2011_01_27

Reference:

• Link

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: $HTTP_PORTS

Destination Network: $HOME_NET

Destination Port: any

Flow: established,to_client

Contents:

• Value: "%90%90%90"

Within:

PCRE:

Special Options:

source