Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET EXPLOIT php script base64 encoded Remote Code Execution 1 rev 2 2018-07-09
snort ET EXPLOIT php script double base64 encoded Remote Code Execution 8 rev 2 2018-07-09
snort ET EXPLOIT php script double base64 encoded Remote Code Execution 4 rev 2 2018-07-09
snort ET EXPLOIT file_put_contents php base64 encoded Remote Code Execution 2 rev 2 2018-07-09
snort ET EXPLOIT Generic system shell command to php base64 encoded Remote Code Execution 2 rev 2 2018-07-09
snort ET INFO Phishing Landing via Weebly.com M4 2016-02-02 rev 3 2018-07-09
snort ET EXPLOIT php script base64 encoded Remote Code Execution 3 rev 2 2018-07-09
snort ET EXPLOIT php script double base64 encoded Remote Code Execution 6 rev 2 2018-07-09
snort ET EXPLOIT file_put_contents php base64 encoded Remote Code Execution 3 rev 2 2018-07-09
snort ET EXPLOIT php script double base64 encoded Remote Code Execution 5 rev 2 2018-07-09
snort ET EXPLOIT php script double base64 encoded Remote Code Execution 3 rev 2 2018-07-09
snort ET EXPLOIT php script double base64 encoded Remote Code Execution 1 rev 2 2018-07-09
snort ET EXPLOIT bin bash base64 encoded Remote Code Execution 1 rev 2 2018-07-09
snort ET EXPLOIT Generic system shell command to php base64 encoded Remote Code Execution 6 rev 2 2018-07-09
snort ET EXPLOIT Exim Internet Mailer Remote Code Execution rev 2 2018-07-09
snort ET INFO Phishing Landing via Weebly.com M2 2016-02-02 rev 3 2018-07-09
snort ET EXPLOIT Generic system shell command to php base64 encoded Remote Code Execution 1 rev 2 2018-07-09
snort ET EXPLOIT bin bash base64 encoded Remote Code Execution 3 rev 2 2018-07-09
snort ET EXPLOIT Generic system shell command to php base64 encoded Remote Code Execution 4 rev 2 2018-07-09
snort ET EXPLOIT file_put_contents php base64 encoded Remote Code Execution 1 rev 2 2018-07-09
snort ET WEB_CLIENT PolarisOffice Insecure Library Loading rev 2 2018-07-06
snort ET WEB_SPECIFIC_APPS ShopNx - Arbitrary File Upload rev 2 2018-07-05
snort ET WEB_SPECIFIC_APPS ManageEngine Exchange Reporter Plus Remote Code Execution rev 2 2018-07-05
snort ET WEB_SPECIFIC_APPS SoftExpert Excellence Suite 2.0 SQL Injection rev 2 2018-07-05
snort ET WEB_SPECIFIC_APPS Online Trade - Information Disclosure rev 2 2018-07-05
snort ET EXPLOIT ADB Broadband Authorization Bypass rev 2 2018-07-05
snort ET EXPLOIT Oracle Weblogic Server Deserialization Remote Command Execution rev 1 2018-07-05
snort ET TROJAN Fareit/Pony Downloader Checkin 2 rev 8 2018-07-04
snort ET EXPLOIT Nagios XI Set DB User Root rev 2 2018-07-03
snort ET EXPLOIT Nagios XI Adding Administrative User rev 2 2018-07-03
snort ET TROJAN Cobalt Strike Exfiltration rev 2 2018-07-03
snort ET EXPLOIT FTPShell client Stack Buffer Overflow rev 2 2018-07-03
snort ET EXPLOIT Nagios XI SQL Injection rev 2 2018-07-02
snort ET EXPLOIT VMware NSX SD-WAN Command Injection rev 2 2018-07-02
snort ET EXPLOIT Nagios XI Remote Code Execution rev 2 2018-07-02
snort ET EXPLOIT Geutebruck Remote Command Execution rev 2 2018-07-02
snort ET EXPLOIT Nagios XI Remote Code Execution 2 rev 2 2018-07-02
snort ET EXPLOIT VMware NSX SD-WAN Command Injection 2 rev 2 2018-07-02
snort ET EXPLOIT DynoRoot DHCP - Client Command Injection rev 2 2018-06-29
snort ET EXPLOIT CloudMe Sync Buffer Overflow rev 2 2018-06-29