root/usr/local/share/protocols/code_red.pat @ 66f2dd0e
1 | c97ab82a | Ermal Lu?i | # Code Red - a worm that attacks Microsoft IIS web servers |
---|---|---|---|
2 | # Pattern attributes: ok fast notsofast subset |
||
3 | # Protocol groups: worm |
||
4 | # Wiki: http://www.protocolinfo.org/wiki/CodeRed |
||
5 | # Copyright (C) 2008 Matthew Strait, Ethan Sommer; See ../LICENSE |
||
6 | |||
7 | code_red |
||
8 | /default\.ida\?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a |