""GPL SHELLCODE Linux shellcode""

SID: 2100652

Revision: 11

Class Type: shellcode-detect

Metadata: created_at 2010_09_23, updated_at 2012_08_21

Reference:

  • arachnids

  • 343

Protocol: ip

Source Network: $EXTERNAL_NET

Source Port: $SHELLCODE_PORTS

Destination Network: $HOME_NET

Destination Port: any

Flow:

Contents:

  • Value: "|90 90 90 E8 C0 FF FF FF|/bin/sh"

Within:

PCRE:

Special Options:

source