Home Documentation Download Latest Rule File Rule Database Mailing List Contact

Rule Database ( GID4 )

ID GID4
Revision 1
Name NopSled(requestLine)
Type requestLine
Pattern \x90{4}
Condition match
Case Sensitive no
Log yes
Action block
Command %req%
Description Triggers when a series of NOPs in HTTP request line is detected. ( exploit, shellcode, egg, x86, 0x90, 90909090, anomaly )
Credit Kanatoko
Signature

Scutum SaaS/ASP型WAFサービス 【スキュータム】Copyright 1998-2009 JUMPERZ.NET All Rights Reserved.