""GPL EXPLOIT WEB-MISC JBoss RMI class download service directory listing attempt""

SID: 2103461

Revision: 1

Class Type: web-application-attack

Metadata: created_at 2016_08_04, updated_at 2016_08_04

Reference:

• Link

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $HTTP_SERVERS

Destination Port: 8083

Flow: to_server,established

Contents:

• Value: "GET %. HTTP/1."

Within:

PCRE:

Special Options:

source