[Snort-sigs] Reverse shell connections

Peter Bates peter.bates at ...3791...
Thu Mar 28 08:13:20 EDT 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Belated reply...

On 23/03/2013 18:34, waldo kitty wrote:
> On 3/23/2013 11:23, Aisling Brennan wrote:
>> Is there a signature in Languardian that detects reverse shell
>> connections? If so how do I run a report to see this activity?
> 
> what is Languardian?

Languardian is a commercial product based on Snort.

I do sometimes ponder if people working on commercial products
do lurk around on these lists... (not that I look on LinkedIn or
anything).

- -- 
Peter Bates
Senior Information Security Officer  Phone: +44(0)2076792049
Information Services Division	     Internal Ext: 32049
University College London
London WC1E 6BT
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJRVDPfAAoJELhVoVpEMS6RrtoH/jUVC8Xy9EqFNhgH/5TQ1Q1O
O/izLb6HCNsZY/+QR5ZL3DCF9a/m3ypPuIv+TgoIYecZJNKwVgaZtm64P5zAqUU1
y85xk6K6IpSCNMm9s5LlhZLPTZVCG71KQvAYmoebs9oLGM1ChMlOQCAMejFj9ae1
b82T7L80TrXWvE6jvVOcPw/Y7IKuYzvwQabMpyRDhEgYHJl/Vxioufbud9B7Z0Xk
12fe/YunrxGlOcVhHt0e4+2aJB8EOXhLJ+ymM5fM3EAc6h1cCPXKLcK/UTOvOn4Z
4MsVsORrJnAHMtWN+B5ojFyd6TxvLAG5YAk3HyFZY1z7+7Af5E0dBrgHgdA4tXU=
=rkJ9
-----END PGP SIGNATURE-----





More information about the Snort-sigs mailing list