[Snort-sigs] New rules

Joseph Gama josephgama at ...144...
Thu Jul 15 19:22:03 EDT 2004


Hello,
Here are some new rules:

fix for SQL Injection false positives.txt - it should
generate less false positives than the OR rule I sent
before

hackedFTPserver.rule - detects if someone is using
hidden stuff in the FTP Server (IIS)

HalfLifeServer.rule - checking DOS attacks on a Half
Life server

IE spyware.rule - more spyware rules for IE

IISrules.rule - detects using ADS to get source

moreSQLinjection.rule - a few more rules

NMAP.rule - trying to detect most NMAP scans

Peace,

Joseph Gama



	
		
__________________________________
Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!
http://promotions.yahoo.com/new_mail 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: fix for SQL Injection false positives.txt
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040715/f89c0aaa/attachment.txt>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: hackedFTPserver.rule
Type: application/octet-stream
Size: 2218 bytes
Desc: hackedFTPserver.rule
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040715/f89c0aaa/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: HalfLifeServer.rule
Type: application/octet-stream
Size: 451 bytes
Desc: HalfLifeServer.rule
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040715/f89c0aaa/attachment-0001.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: IE spyware.rule
Type: application/octet-stream
Size: 3014 bytes
Desc: IE spyware.rule
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040715/f89c0aaa/attachment-0002.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: IISrules.rule
Type: application/octet-stream
Size: 3986 bytes
Desc: IISrules.rule
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040715/f89c0aaa/attachment-0003.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: moreSQLinjection.rule
Type: application/octet-stream
Size: 4646 bytes
Desc: moreSQLinjection.rule
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040715/f89c0aaa/attachment-0004.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: NMAP.rule
Type: application/octet-stream
Size: 2271 bytes
Desc: NMAP.rule
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040715/f89c0aaa/attachment-0005.obj>


More information about the Snort-sigs mailing list