[Snort-sigs] Linking this with that to create an alert

James Lay jlay at ...3266...
Wed Jan 29 11:06:17 EST 2014


All,

In looking at:

http://blog.spiderlabs.com/2014/01/beware-bats-hide-in-your-jquery-.html

I'm wondering if there's a way to, in plain English: "if I requested a 
jquery named file, and that file contains a document.write, then alert". 
Betting it's a flowbit thing, which I've not really used much.  Any 
good resources that could assist with something like this?  Thanks.

James




More information about the Snort-sigs mailing list