File: code_red.pat

package info (click to toggle)
l7-protocols 20090528-4
  • links: PTS, VCS
  • area: main
  • in suites: wheezy
  • size: 1,372 kB
  • sloc: ansic: 1,128; cpp: 261; sh: 231; makefile: 30
file content (8 lines) | stat: -rw-r--r-- 633 bytes parent folder | download | duplicates (2) 
1
2
3
4
5
6
7
8
 
# Code Red - a worm that attacks Microsoft IIS web servers
# Pattern attributes: ok fast notsofast subset
# Protocol groups: worm
# Wiki: http://www.protocolinfo.org/wiki/CodeRed
# Copyright (C) 2008 Matthew Strait, Ethan Sommer; See ../LICENSE

code_red
/default\.ida\?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a