Home Documentation Download Latest Rule File Rule Database Mailing List Contact

Rule Database ( GID6 )

ID GID6
Revision 1
Name NopSled(requestBody)
Type requestBody
Pattern \x90{4}
Condition match
Case Sensitive no
Log yes
Action block
Command %req%
Description Triggers when a series of NOPs in HTTP request body is detected. ( exploit, shellcode, egg, x86, 0x90, 90909090, anomaly )
Credit Kanatoko
Signature

Scutum SaaS/ASP型WAFサービス 【スキュータム】Copyright 1998-2009 JUMPERZ.NET All Rights Reserved.