Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | [Snort-sigs] Bleeding Edge Threats Daily Update |
|---|---|
| Date: | Wed, 25 Oct 2006 21:00:07 -0400 (EDT) |
[***] Results from Oinkmaster started Wed Oct 25 21:00:07 2006 [***]
[+++] Added rules: [+++]
2003145 - BLEEDING-EDGE EXPLOIT Novell HttpStk Remote Code Execution Attempt
/nds (bleeding-exploit.rules)
2003146 - BLEEDING-EDGE EXPLOIT Novell HttpStk Remote Code Execution Attempt
/dhost (bleeding-exploit.rules)
2003147 - BLEEDING-EDGE EXPLOIT Novell HttpStk Remote Code Execution Attempt
/dhost (linewrap) (bleeding-exploit.rules)
2410020 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 21)
(bleeding-botcc.rules)
2411020 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 21) - BLOCKING
SOURCE (bleeding-botcc-BLOCK.rules)
3003147 - BLEEDING-EDGE EXPLOIT Novell HttpStk Remote Code Execution Attempt
/nds (linewrap) (bleeding-exploit.rules)
[///] Modified active rules: [///]
2402000 - BLEEDING-EDGE DROP Dshield Block Listed Source
(bleeding-dshield.rules)
2403000 - BLEEDING-EDGE DROP Dshield Block Listed Source - BLOCKING
(bleeding-dshield-BLOCK.rules)
2410000 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 1)
(bleeding-botcc.rules)
2410001 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 2)
(bleeding-botcc.rules)
2410002 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 3)
(bleeding-botcc.rules)
2410003 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 4)
(bleeding-botcc.rules)
2410004 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 5)
(bleeding-botcc.rules)
2410005 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 6)
(bleeding-botcc.rules)
2410006 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 7)
(bleeding-botcc.rules)
2410007 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 8)
(bleeding-botcc.rules)
2410008 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 9)
(bleeding-botcc.rules)
2410009 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 10)
(bleeding-botcc.rules)
2410010 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 11)
(bleeding-botcc.rules)
2410011 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 12)
(bleeding-botcc.rules)
2410012 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 13)
(bleeding-botcc.rules)
2410013 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 14)
(bleeding-botcc.rules)
2410014 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 15)
(bleeding-botcc.rules)
2410015 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 16)
(bleeding-botcc.rules)
2410016 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 17)
(bleeding-botcc.rules)
2410017 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 18)
(bleeding-botcc.rules)
2410018 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 19)
(bleeding-botcc.rules)
2410019 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 20)
(bleeding-botcc.rules)
2411000 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 1) - BLOCKING SOURCE
(bleeding-botcc-BLOCK.rules)
2411001 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 2) - BLOCKING SOURCE
(bleeding-botcc-BLOCK.rules)
2411002 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 3) - BLOCKING SOURCE
(bleeding-botcc-BLOCK.rules)
2411003 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 4) - BLOCKING SOURCE
(bleeding-botcc-BLOCK.rules)
2411004 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 5) - BLOCKING SOURCE
(bleeding-botcc-BLOCK.rules)
2411005 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 6) - BLOCKING SOURCE
(bleeding-botcc-BLOCK.rules)
2411006 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 7) - BLOCKING SOURCE
(bleeding-botcc-BLOCK.rules)
2411007 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 8) - BLOCKING SOURCE
(bleeding-botcc-BLOCK.rules)
2411008 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 9) - BLOCKING SOURCE
(bleeding-botcc-BLOCK.rules)
2411009 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 10) - BLOCKING
SOURCE (bleeding-botcc-BLOCK.rules)
2411010 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 11) - BLOCKING
SOURCE (bleeding-botcc-BLOCK.rules)
2411011 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 12) - BLOCKING
SOURCE (bleeding-botcc-BLOCK.rules)
2411012 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 13) - BLOCKING
SOURCE (bleeding-botcc-BLOCK.rules)
2411013 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 14) - BLOCKING
SOURCE (bleeding-botcc-BLOCK.rules)
2411014 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 15) - BLOCKING
SOURCE (bleeding-botcc-BLOCK.rules)
2411015 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 16) - BLOCKING
SOURCE (bleeding-botcc-BLOCK.rules)
2411016 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 17) - BLOCKING
SOURCE (bleeding-botcc-BLOCK.rules)
2411017 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 18) - BLOCKING
SOURCE (bleeding-botcc-BLOCK.rules)
2411018 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 19) - BLOCKING
SOURCE (bleeding-botcc-BLOCK.rules)
2411019 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 20) - BLOCKING
SOURCE (bleeding-botcc-BLOCK.rules)
[+++] Added non-rule lines: [+++]
-> Added to bleeding-exploit.rules (1):
#By Michael Hale Ligh and Ryan Smith
-> Added to bleeding-sid-msg.map (6):
2003145 || BLEEDING-EDGE EXPLOIT Novell HttpStk Remote Code Execution
Attempt /nds
2003146 || BLEEDING-EDGE EXPLOIT Novell HttpStk Remote Code Execution
Attempt /dhost
2003147 || BLEEDING-EDGE EXPLOIT Novell HttpStk Remote Code Execution
Attempt /dhost (linewrap)
2410020 || BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 21)
|| url,www.shadowserver.org
2411020 || BLEEDING-EDGE DROP Known Bot C&C Traffic (group 21) -
BLOCKING SOURCE || url,www.shadowserver.org
3003147 || BLEEDING-EDGE EXPLOIT Novell HttpStk Remote Code Execution
Attempt /nds (linewrap)
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: [Snort-sigs] Help, Joel Esler |
|---|---|
| Next by Date: | [Snort-sigs] False Positives, Maxwell Lutticken |
| Previous by Thread: | [Snort-sigs] Bleeding Edge Threats Daily Update, bleeding |
| Next by Thread: | [Snort-sigs] Bleeding Edge Threats Daily Update, bleeding |
| Indexes: | [Date] [Thread] [Top] [All Lists] |