Home Documentation Download Latest Rule File Rule Database Mailing List Contact

Rule Database ( GID5 )

ID GID5
Revision 1
Name NopSled(requestHeader)
Type requestHeader
Pattern \x90{4}
Condition match
Case Sensitive no
Log yes
Action block
Command %req%
Description Triggers when a series of NOPs in HTTP request header field is detected. ( exploit, shellcode, egg, x86, 0x90, 90909090, anomaly )
Credit Kanatoko
Signature

Scutum SaaS/ASP型WAFサービス 【スキュータム】Copyright 1998-2009 JUMPERZ.NET All Rights Reserved.