""ET WEB_SPECIFIC_APPS Jenkins Script Console Usage (Can be Used to Spawn Shell)""

SID: 2016294

Revision: 9

Class Type: attempted-user

Metadata: created_at 2013_01_25, updated_at 2013_01_26

Reference:

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $HOME_NET

Destination Port: $HTTP_PORTS

Flow: established,to_server

Contents:

  • Value: "POST"

  • Value: "/script"

  • Value: "script"

  • Value: "Submit"

  • Value: "Runtime"

  • Value: "getRuntime"

  • Value: ".exec"

Within:

PCRE: "/\/script\/?$/Ui"

Special Options:

  • http_method

  • http_uri

  • nocase

  • http_client_body

  • nocase

  • nocase

  • http_client_body

  • http_client_body

  • nocase

  • nocase

  • http_client_body

  • nocase

  • http_client_body

source