""ET CURRENT_EVENTS NeoSploit - Version Enumerated - Java""

SID: 2015693

Revision: 1

Class Type: attempted-user

Metadata: created_at 2012_09_11, updated_at 2012_09_11

Reference:

Protocol: tcp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: $HTTP_PORTS

Flow: established,to_server

Contents:

  • Value: "/1."

Within:

PCRE: "/^\/[a-f0-9]{24}\/[a-f0-9]{24}\/[a-f0-9]{24}\/1.[4-7].[0-2].[0-9]{1,2}\//U"

Special Options:

  • http_uri

source