security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
Files
bb2e6acd4062671aa832621b08db13e99eeea86e
blue-team-tools/rules/web
T
History
Florian Roth bb2e6acd40 Merge pull request #1926 from pbssubhash/master 
Adding CVE's Exploitation attempt detection: Year - 2010
2021-09-23 14:08:15 +02:00
..
sql_injection_keywords.yml
fix titles
2021-08-15 19:05:00 +02:00
web_apache_segfault.yml
Second round
2020-09-15 07:02:30 -06:00
web_apache_threading_error.yml
Added UUIDs to rules
2019-11-12 23:12:27 +01:00
web_arcadyan_router_cve_2021_20090_2021_20091_exploit.yml
Merged rules
2021-08-25 11:18:51 +05:45
web_citrix_cve_2019_19781_exploit.yml
Second round
2020-09-15 07:02:30 -06:00
web_citrix_cve_2020_8193_8195_exploit.yml
Split PR 1802 fix net rules
2021-08-09 17:23:15 +02:00
web_cve_2018_2894_weblogic_exploit.yml
tags update
2021-08-24 09:35:04 +02:00
web_cve_2019_3398_confluence.yml
Second round
2020-09-15 07:02:30 -06:00
web_cve_2020_0688_msexchange.yml
Second round
2020-09-15 07:02:30 -06:00
web_cve_2020_3452_cisco_asa_ftd.yml
tags update
2021-08-24 09:35:04 +02:00
web_cve_2020_5902_f5_bigip.yml
rule: extended F5 BIG-IP exploitation detection rule
2020-07-07 21:45:08 +02:00
web_cve_2020_14882_weblogic_exploit.yml
fix cve tags
2021-08-24 10:10:45 +02:00
web_cve_2021_2109_weblogic_rce_exploit.yml
tags update
2021-08-24 09:35:04 +02:00
web_cve_2021_21978_vmware_view_planner_exploit.yml
tags update
2021-08-24 09:35:04 +02:00
web_cve_2021_22893_pulse_secure_rce_exploit.yml
Spelling Errors on Rules
2021-08-18 18:58:20 +00:00
web_cve_2021_26814_wzuh_rce.yml
fix cve tags
2021-08-24 10:10:45 +02:00
web_cve_2021_26858_iis_rce.yml
add keywords condition
2021-08-17 06:24:04 +02:00
web_cve_2021_33766_msexchange_proxytoken.yml
refactor: add 500 status code in selection2
2021-08-30 16:12:42 +02:00
web_cve_2021_40539_adselfservice.yml
Update web_cve_2021_40539_adselfservice.yml
2021-09-20 15:51:21 +02:00
web_cve_2021_40539_manageengine_adselfservice_exploit.yml
Update web_cve_2021_40539_manageengine_adselfservice_exploit.yml
2021-09-17 09:53:12 +07:00
web_cve-2010-0943_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-0944_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-0985_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1219_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1304_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1305_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1306_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1307_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1308_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1312_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1313_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1314_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1345_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1353_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1354_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1470_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1471_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1472_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1473_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1474_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1475_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1476_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1494_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1495_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1532_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1533_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1534_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1535_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1601_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1602_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1607_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1657_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1659_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1714_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1717_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1718_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1719_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1722_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1875_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1953_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1954_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1955_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1956_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1979_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1980_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1981_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-1983_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-2033_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-2034_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-2035_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-2036_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-2122_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-2259_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-2307_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-2682_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-2861_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-2920_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-3426_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-4231_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-4617_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_cve-2010-5278_exploitation_attempt.yml
Corrected Rules - Logsource
2021-09-13 10:16:02 +05:30
web_exchange_cve_2020_0688_exploit.yml
Second round
2020-09-15 07:02:30 -06:00
web_exchange_exploitation_hafnium.yml
Merging upstream updates
2021-07-01 12:18:30 +05:45
web_exchange_proxyshell_successful.yml
rules: ProxyShell refactoring and new rule
2021-08-09 17:57:34 +02:00
web_exchange_proxyshell.yml
fix: typo in description
2021-08-12 10:11:17 +02:00
web_expl_exchange_cve_2021_28480.yml
Spelling Errors on Rules
2021-08-18 18:58:20 +00:00
web_fortinet_cve_2018_13379_preauth_read_exploit.yml
Removed a value
2020-12-08 10:38:32 +01:00
web_fortinet_cve_2021_22123_exploit.yml
fix List values must be strings or numbers (46)
2021-08-29 08:57:25 +02:00
web_multiple_suspicious_resp_codes_single_source.yml
Second round
2020-09-15 07:02:30 -06:00
web_nginx_core_dump.yml
Update web_nginx_core_dump.yml
2021-07-03 10:39:37 +08:00
web_pulsesecure_cve_2019_11510.yml
fix filename
2021-09-22 16:21:07 +02:00
web_solarwinds_cve_2020_10148.yml
Fixed typo in file format
2020-12-28 11:46:02 +05:45
web_solarwinds_supernova_webshell.yml
Split PR 1802 fix net rules
2021-08-09 17:23:15 +02:00
web_sonicwall_jarrewrite_exploit.yml
Merging upstream updates
2021-07-01 12:18:30 +05:45
web_source_code_enumeration.yml
Second round
2020-09-15 07:02:30 -06:00
web_terramaster_cve_2020_28188_rce_exploit.yml
fix cve tags
2021-08-24 10:10:45 +02:00
web_unc2546_dewmode_php_webshell.yml
Merging upstream updates
2021-07-01 12:18:30 +05:45
web_vsphere_cve_2021_21972_unauth_rce_exploit.yml
Split PR 1802 fix net rules
2021-08-09 17:23:15 +02:00
web_webshell_keyword.yml
Second round
2020-09-15 07:02:30 -06:00
win_powershell_snapins_hafnium.yml
Replace old mitre techniques by new one
2021-08-22 13:57:56 +02:00
win_webshell_regeorg.yml
Replace old mitre techniques by new one
2021-08-22 13:57:56 +02:00
xss_keywords.yml
fix titles
2021-08-15 19:05:00 +02:00