""ET SCAN MYSQL MySQL Remote FAST Account Password Cracking""

SID: 2015986

Revision: 5

Class Type: protocol-command-decode

Metadata: created_at 2012_12_05, updated_at 2012_12_05

Reference:

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $SQL_SERVERS

Destination Port: 3306

Flow: to_server,established

Contents:

  • Value: "|11|" Depth: 4 Offset: 3

Within:

PCRE:

Special Options:

source