Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS RSS Simple News news.php pid parameter Remote SQL Injection rev 8 2024-03-06
suricata ET WEB_SPECIFIC_APPS YourFreeWorld Classifieds Blaster tr.php id Parameter SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS Maran PHP Shop id Parameter Remote SQL Injection rev 8 2024-03-06
suricata ET INFO Unsupported/Fake FireFox Version 2. rev 6 2024-03-06
suricata ET INFO external cPanel login rev 4 2024-03-06
suricata ET MOBILE_MALWARE iOS/Xsser Checkin rev 4 2024-03-06
suricata ET MALWARE Possible APT-12 Related C2 rev 4 2024-03-06
suricata ET MALWARE DDoS.XOR Checkin 3 rev 4 2024-03-06
suricata ET MALWARE Pony Loader default URI struct rev 7 2024-03-06
suricata ET FTP Outbound Java Downloading jar over FTP rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS e107 Plugin lyrics_menu lyrics_song.php l_id Parameter Remote SQL Injection rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS Lito Lite CMS cate.php cid parameter Remote SQL Injection rev 9 2024-03-06
suricata ET WEB_SPECIFIC_APPS Synactis All_IN_THE_BOX ActiveX SaveDoc Method Arbitrary File Overwrite rev 4 2024-03-06
suricata ET INFO HTTP Request to a *.cz.cc domain rev 6 2024-03-06
suricata ET INFO HTTP Request to a *.vv.cc domain rev 9 2024-03-06
suricata ET WEB_SPECIFIC_APPS MoinMoin twikidraw Action Traversal File Upload rev 6 2024-03-06
suricata ET HUNTING SUSPICIOUS *.rar.exe in HTTP URL rev 5 2024-03-06
suricata ET HUNTING Windows Scheduled Task XML Response from Server rev 1 2024-03-06
suricata ET ADWARE_PUP Carder Card Checking Tool try2check.me SSL Certificate on Off Port rev 4 2024-03-06
suricata ET EXPLOIT Apache Struts Possible OGNL Java WriteFile in client_body rev 5 2024-03-06
suricata ET MOBILE_MALWARE Android BatteryBotPro Checkin 2 rev 6 2024-03-06
suricata ET MALWARE Lethic Spambot CnC Initial Connect rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS AvailScript Article Script articles.php aIDS Parameter SQL Injection rev 8 2024-03-06
suricata ET EXPLOIT Linksys Auth Bypass fw_sys_up.cgi rev 4 2024-03-06
suricata ET WEB_SPECIFIC_APPS Joomla Full Path Disclosure -- content.php rev 9 2024-03-06
suricata ET WEB_SPECIFIC_APPS Flash Quiz answers.php quiz Parameter SQL Injection rev 8 2024-03-06
suricata ET WEB_SERVER Possible WebLogic Admin Login With Default Creds rev 6 2024-03-06
suricata ET INFO Unsupported/Fake Windows NT Version 5.0 rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS MyioSoft EasyBookMarker Parent parameter SQL Injection rev 9 2024-03-06
suricata ET EXPLOIT ASUS RT N56U Router DNS Change GET Request 1 rev 5 2024-03-06
suricata ET EXPLOIT Linksys Auth Bypass share_editor.cgi rev 4 2024-03-06
suricata ET MALWARE Rogue.Win32/Winwebsec Install 2 rev 7 2024-03-06
suricata ET MALWARE Cookies/Cookiebag Checkin rev 5 2024-03-06
suricata ET MALWARE MS Remote Desktop edc User Login Request rev 2 2024-03-06
suricata ET WEB_SERVER Script tag in URI Possible Cross Site Scripting Attempt rev 9 2024-03-06
suricata ET MALWARE Win32/Nitol.B Checkin rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Simple Customer contact.php SQL injection rev 7 2024-03-06
suricata ET SCAN MYSQL 4.1 brute force root login attempt rev 5 2024-03-06
suricata ET MALWARE Trojan-Dropper.Win32.StartPage.dvm or Mebromi Bios Rootkit CnC Count Checkin rev 8 2024-03-06
suricata ET EXPLOIT Apache Struts Possible OGNL AllowStaticMethodAccess in URI rev 5 2024-03-06