""ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML""
SID: 2031505
Revision: 2
Class Type: network-scan
Metadata: affected_product Wordpress, attack_target Web_Server, created_at 2021_01_08, deployment Perimeter, signature_severity Minor, updated_at 2021_01_08
Reference:
Protocol: tcp
Source Network: any
Source Port: any
Destination Network: $HOME_NET
Destination Port: $HTTP_PORTS
Flow: established,to_server
Contents:
- Value: "/wp-includes/wlwmanifest.xml"
Within:
PCRE:
Special Options:
- http_uri