|
ID
|
GID5
|
|
Revision
|
1
|
|
Name
|
NopSled(requestHeader)
|
|
Type
|
requestHeader
|
|
Pattern
|
\x90{4}
|
|
Condition
|
match
|
|
Case Sensitive
|
no
|
|
Log
|
yes
|
|
Action
|
block
|
|
Command
|
%req%
|
|
Description
|
Triggers when a series of NOPs in HTTP request header field is detected. ( exploit, shellcode, egg, x86, 0x90, 90909090, anomaly )
|
|
Credit
|
Kanatoko
|
|
Signature
|
|