Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
4 detections
Filters
Last updated
All Time
Detection languages
2
1
1
Contributors
2
1
1
Categories
3
3
2
1
1
Platforms
3
3
Products / Services
2
2
1
1
1
MITRE Techniques
3
3
1
1
CVEs
71
71
64
58
49
IDS Classtypes
2
IDS Protocols
2
Detects attempts to exploit the Shellshock vulnerability (CVE-2014-6271) by inspecting HTTP request headers for the characteristic function definition syntax '() { :;'. This pattern is commonly used in malicious payloads to trigger command execution via environment variables in CGI scripts.
Detects attempts to exploit the Shellshock vulnerability (CVE-2014-6271) by inspecting HTTP request headers for the characteristic function definition syntax '() { :;'. This pattern is commonly used in malicious payloads to trigger command execution via environment variables in CGI scripts.
Detects a variety of HTTP exploitation attempts associated with the RondoDox botnet campaign. This campaign uses a 'shotgun' approach, targeting numerous vulnerabilities in internet-facing devices like routers, DVRs, and web servers.
Detects attempts to exploit the Shellshock vulnerability (CVE-2014-6271) by looking for specific shellshock expressions in log files. These expressions are commonly used to inject and execute arbitrary commands.
