EmergingThreats> Main Web>20028311 (revision 1)EditAttach

alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET SCAN Watchfire AppScan? Web App Vulnerability Scanner"; uricontent: "/appscan_fingerprint/mac_address"; nocase; flow:established,to_server; classtype:attempted-recon; reference:url,www.watchfire.com/products/appscan/default.aspx; sid:20028311; rev:2;)

Added 2008-06-23 16:58:07 UTC


alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET SCAN Watchfire AppScan? Web App Vulnerability Scanner"; uricontent: "/appscan_fingerprint/mac_address"; nocase; flow:established,to_server; classtype:attempted-recon; reference:url,www.watchfire.com/products/appscan/default.aspx; sid:20028311; rev:2;)

Added 2008-06-23 16:58:07 UTC


alert tcp $EXTERNAL_NET 1024: -> $HOME_NET $HTTP_PORTS (msg:"ET SCAN Watchfire AppScan? Web App Vulnerability Scanner"; uricontent: "/appscan_fingerprint/mac_address"; nocase; flow:established,to_server; classtype:attempted-recon; reference:url,www.watchfire.com/products/appscan/default.aspx; sid:20028311; rev:1;)

Added 2008-06-23 12:39:29 UTC


Edit | Attach | Print version | History: r3 < r2 < r1 | Backlinks | Raw View | Raw edit | More topic actions...
Topic revision: r1 - 2009-09-15 - JackPepper
 
This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright © Emerging Threats