summaryrefslogtreecommitdiffstats
path: root/usr/local/share/protocols/code_red.pat
blob: df0beee6d843dc06867a360dfa9b94b3488c4547 (plain)
1
2
3
4
5
6
7
8
# Code Red - a worm that attacks Microsoft IIS web servers
# Pattern attributes: ok fast notsofast subset
# Protocol groups: worm
# Wiki: http://www.protocolinfo.org/wiki/CodeRed
# Copyright (C) 2008 Matthew Strait, Ethan Sommer; See ../LICENSE

code_red
/default\.ida\?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a
OpenPOWER on IntegriCloud