E
dit
A
ttach
P
rintable
r1 - 27 Jun 2008 - 14:35:57 -
TWikiGuest
You are here:
TWiki
>
Main Web
>
2008354
alert tcp $HOME_NET any -> $EXTERNAL_NET 82 (msg:"ET TROJAN LDPinch Checkin on Port 82"; flow:established,to_server; uricontent:".php"; nocase; content:"a="; content:"&b=Pinch"; distance:0; content:"&d="; distance:0; content:"&c="; distance:0; classtype:trojan-activity; sid:2008354; rev:1;)
Added 2008-06-27 10:35:57 UTC
Please enter documentation, comments, false positives, or concerns with this signature. Press the Attach button below to add samples or Pcaps.
E
dit
|
A
ttach
|
P
rintable
|
R
aw View
|
Backlinks:
We
b
,
A
l
l Webs
|
H
istory
: r1
|
M
ore topic actions
Main
Log In
or
Register
Main Web
Create New Topic
Index
Search
Changes
Preferences
User Reference
ATasteOfTWiki
TextFormattingRules
Signature Reference
WebRss
Feed
EmergingFAQ
Copyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki?
Send feedback