security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
3da07164ce0d651bf72691bac1cfcafbf20249de
blue-team-tools/rules/web
T
History
frack113 c62d624892 Use W3C cs-uri-query
2023-01-02 18:56:34 +01:00
..
web_apache_segfault.yml
Order yaml field
2022-10-25 10:08:58 +02:00
web_apache_threading_error.yml
Order yaml field
2022-10-25 10:08:58 +02:00
web_cve_2010_5278_exploitation_attempt.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2014_6287_hfs_rce.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2018_2894_weblogic_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2018_13379_fortinet_preauth_read_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2019_3398_confluence.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2019_11510_pulsesecure_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2019_19781_citrix_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:56:34 +01:00
web_cve_2020_0688_exchange_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2020_0688_msexchange.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2020_3452_cisco_asa_ftd.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2020_5902_f5_bigip.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2020_8193_8195_citrix_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2020_10148_solarwinds_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2020_14882_weblogic_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2020_28188_terramaster_rce_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_2109_weblogic_rce_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_20090_2021_20091_arcadyan_router_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_21972_vsphere_unauth_rce_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_21978_vmware_view_planner_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_22005_vmware_file_upload.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_22123_fortinet_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_22893_pulse_secure_rce_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_26084_confluence_rce_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_26814_wzuh_rce.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_26858_iis_rce.yml
old experimental rule promotion
2022-10-09 16:54:04 +02:00
web_cve_2021_27905_apache_solr_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_28480_exchange_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_33766_msexchange_proxytoken.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_40539_adselfservice.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_40539_manageengine_adselfservice_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_41773_apache_path_traversal.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_42237_sitecore_report_ashx.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_43798_grafana.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_44228_log4j_fields.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2021_44228_log4j.yml
Order yaml field
2022-10-25 10:08:58 +02:00
web_cve_2022_27925_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2022_31656_auth_bypass.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2022_31659_vmware_rce.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2022_33891_spark_shell_command_injection.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2022_36804_atlassian_bitbucket_command_injection.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_cve_2022_46169_cacti_exploitation_attempt.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_exchange_exploitation_hafnium.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_exchange_owassrf_exploitation.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_exchange_owassrf_poc_exploitation.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_exchange_proxyshell_successful.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_exchange_proxyshell.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_iis_tilt_shortname_scan.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_java_payload_in_access_logs.yml
Order yaml field
2022-10-25 10:08:58 +02:00
web_jndi_exploit.yml
Promotion rules (#3821)
2022-12-27 12:29:10 +01:00
web_multiple_susp_resp_codes_single_source.yml
Order yaml field
2022-10-25 10:08:58 +02:00
web_nginx_core_dump.yml
old experimental rule promotion
2022-10-09 16:54:04 +02:00
web_path_traversal_exploitation_attempt.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_solarwinds_supernova_webshell.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_sonicwall_jarrewrite_exploit.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_source_code_enumeration.yml
Order yaml field
2022-10-25 10:08:58 +02:00
web_sql_injection_in_access_logs.yml
Order yaml field
2022-10-25 10:08:58 +02:00
web_ssti_in_access_logs.yml
Order yaml field
2022-10-25 10:08:58 +02:00
web_susp_useragents.yml
Update W3C field name
2023-01-02 16:39:55 +01:00
web_susp_windows_path_uri.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_unc2546_dewmode_php_webshell.yml
Use W3C cs-uri-query
2023-01-02 18:45:50 +01:00
web_webshell_regeorg.yml
Update W3C field name
2023-01-02 16:39:55 +01:00
web_win_webshells_in_access_logs.yml
feat: add missing /r to cmd
2022-11-18 13:45:01 +01:00
web_xss_in_access_logs.yml
Order yaml field
2022-10-25 10:08:58 +02:00