""GPL TFTP GET Admin.dll""

SID: 2101289

Revision: 5

Class Type: successful-admin

Metadata: created_at 2010_09_23, updated_at 2012_09_14

Reference:

Protocol: udp

Source Network: any

Source Port: any

Destination Network: any

Destination Port: 69

Flow:

Contents:

  • Value: "|00 01|" Depth: 2

  • Value: "admin.dll"

Offset: 2

Within:

PCRE:

Special Options:

  • nocase

source