Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
snort ET WEB_SERVER PHP Possible glob Remote File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible file Remote File Inclusion Attempt rev 5 2011-06-11
snort ET WEB_SERVER PHP Possible expect Remote File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible rar Remote File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible ftps Local File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible ftp Remote File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible ssh2 Remote File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible zlib Remote File Inclusion Attempt rev 4 2011-06-11
snort ET WEB_SERVER PHP Possible php Remote File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible ogg Remote File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible https Local File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible data Remote File Inclusion Attempt rev 3 2011-06-11
snort ET WEB_SERVER PHP Possible phar Remote File Inclusion Attempt rev 4 2011-06-11
snort ET POLICY StumbleUpon Submission Detected rev 2 2011-06-10
snort ET WEB_SPECIFIC_APPS TEDE Simplificado processaPesquisa.php script UNION SELECT SQL Injection Attempt rev 3 2011-06-10
snort ET WEB_SPECIFIC_APPS TEDE Simplificado processaPesquisa.php script DELETE FROM SQL Injection Attempt rev 3 2011-06-10
snort ET WEB_SPECIFIC_APPS TEDE Simplificado processaPesquisa.php script UPDATE SET SQL Injection Attempt rev 1 2011-06-10
snort ET WEB_SPECIFIC_APPS TEDE Simplificado processaPesquisa.php script INSERT INTO SQL Injection Attempt rev 1 2011-06-10
snort ET WEB_SPECIFIC_APPS People Joomla Component controller Parameter Local File Inclusion Vulnerability rev 1 2011-06-10
snort ET WEB_SPECIFIC_APPS TEDE Simplificado processaPesquisa.php script SELECT FROM SQL Injection Attempt rev 1 2011-06-10
snort ET SMTP Robtex.com Block Message rev 2 2011-06-10
snort ET TROJAN W32.Qakbot Request for Compromised FTP Sites rev 1 2011-06-09
snort ET SHELLCODE Possible %u0d0d%u0d0d UTF-16 Heap Spray Attempt rev 1 2011-06-09
snort ET SHELLCODE Possible %u0d%u0d%u0d%u0d UTF-8 Heap Spray Attempt rev 1 2011-06-09
snort ET WEB_SPECIFIC_APPS Possible ZOHO ManageEngine ADSelfService Captcha Bypass Attempt rev 1 2011-06-09
snort ET WEB_CLIENT Adobe Audition Malformed Session File Buffer Overflow Attempt rev 1 2011-06-09
snort ET SHELLCODE Possible 0x0c0c0c0c Heap Spray Attempt rev 1 2011-06-09
snort ET SHELLCODE Possible 0x0b0b0b0b Heap Spray Attempt rev 1 2011-06-09
snort ET SHELLCODE Possible 0x0d0d0d0d Heap Spray Attempt rev 1 2011-06-09
snort GPL FTP large PWD command rev 7 2011-06-08
snort GPL SQL connect_data remote version detection attempt rev 7 2011-06-08
snort GPL SCAN SSH Version map attempt rev 7 2011-06-08
snort GPL FTP CWD ~ attempt rev 12 2011-06-08
snort GPL EXPLOIT cmd32.exe access rev 5 2011-06-08
snort GPL WEB_SERVER perl command attempt rev 9 2011-06-08
snort GPL POP3 POP3 PASS overflow attempt rev 15 2011-06-08
snort GPL POP3 APOP overflow attempt rev 14 2011-06-08
snort GPL ATTACK_RESPONSE index of /cgi-bin/ response rev 7 2011-06-08
snort GPL FTP invalid MODE rev 8 2011-06-08
snort GPL FTP RNFR ././ attempt rev 6 2011-06-08