Network IDS rules · threatengine.sh

Home/Network IDS rules

IDS / IPS

Network IDS rules

6,060 rules · linked to T1190 · Snort / Suricata signatures

Network intrusion-detection signatures from open rulesets (ET Open, Snort Community, abuse.ch). These match malicious traffic patterns on the wire. Expand a rule to view its source link.

◈

Rules

50 shown of 6,060

et-open web-application-attack

ET WEB_SPECIFIC_APPS Dokeos SQL Injection Attempt -- courseLog.php scormcontopen INSERT

sid 2004049 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS Dokeos SQL Injection Attempt -- courseLog.php scormcontopen DELETE

sid 2004050 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS Dokeos SQL Injection Attempt -- courseLog.php scormcontopen ASCII

sid 2004051 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS Dokeos SQL Injection Attempt -- courseLog.php scormcontopen UPDATE

sid 2004052 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS cpCommerce SQL Injection Attempt -- category.php id_category SELECT

sid 2004053 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS cpCommerce SQL Injection Attempt -- category.php id_category UNION SELECT

sid 2004054 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS cpCommerce SQL Injection Attempt -- category.php id_category INSERT

sid 2004055 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS cpCommerce SQL Injection Attempt -- category.php id_category DELETE

sid 2004056 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS cpCommerce SQL Injection Attempt -- category.php id_category ASCII

sid 2004057 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS cpCommerce SQL Injection Attempt -- category.php id_category UPDATE

sid 2004058 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php rating SELECT

sid 2004059 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php rating UNION SELECT

sid 2004060 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php rating INSERT

sid 2004061 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php rating DELETE

sid 2004062 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php rating ASCII

sid 2004063 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php rating UPDATE

sid 2004064 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS Dokeos SQL Injection Attempt -- my_progress.php course SELECT

sid 2004065 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS Dokeos SQL Injection Attempt -- my_progress.php course UNION SELECT

sid 2004066 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS Dokeos SQL Injection Attempt -- my_progress.php course INSERT

sid 2004067 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS Dokeos SQL Injection Attempt -- my_progress.php course DELETE

sid 2004068 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS Dokeos SQL Injection Attempt -- my_progress.php course ASCII

sid 2004069 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS Dokeos SQL Injection Attempt -- my_progress.php course UPDATE

sid 2004070 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php post_id SELECT

sid 2004071 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php post_id UNION SELECT

sid 2004072 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php post_id INSERT

sid 2004073 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php post_id DELETE

sid 2004074 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php post_id ASCII

sid 2004075 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS 2z Project SQL Injection Attempt -- rating.php post_id UPDATE

sid 2004076 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS Jelsoft vBulletin SQL Injection Attempt -- attachment.php SELECT

sid 2004077 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS Jelsoft vBulletin SQL Injection Attempt -- attachment.php UNION SELECT

sid 2004078 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS Jelsoft vBulletin SQL Injection Attempt -- attachment.php INSERT

sid 2004079 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS Jelsoft vBulletin SQL Injection Attempt -- attachment.php DELETE

sid 2004080 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS Jelsoft vBulletin SQL Injection Attempt -- attachment.php ASCII

sid 2004081 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS Jelsoft vBulletin SQL Injection Attempt -- attachment.php UPDATE

sid 2004082 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php catid SELECT

sid 2004083 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php catid UNION SELECT

sid 2004084 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php catid INSERT

sid 2004085 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php catid DELETE

sid 2004086 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php catid ASCII

sid 2004087 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS DGNews SQL Injection Attempt -- news.php catid UPDATE

sid 2004088 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS My Little Forum SQL Injection Attempt -- user.php id SELECT

sid 2004095 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS My Little Forum SQL Injection Attempt -- user.php id UNION SELECT

sid 2004096 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS My Little Forum SQL Injection Attempt -- user.php id INSERT

sid 2004097 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS My Little Forum SQL Injection Attempt -- user.php id DELETE

sid 2004098 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS My Little Forum SQL Injection Attempt -- user.php id ASCII

sid 2004099 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS My Little Forum SQL Injection Attempt -- user.php id UPDATE

sid 2004100 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS cpCommerce SQL Injection Attempt -- manufacturer.php id_manufacturer SELECT

sid 2004101 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS cpCommerce SQL Injection Attempt -- manufacturer.php id_manufacturer UNION SELECT

sid 2004102 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS cpCommerce SQL Injection Attempt -- manufacturer.php id_manufacturer INSERT

sid 2004103 format suricata

et-open web-application-attack

ET WEB_SPECIFIC_APPS cpCommerce SQL Injection Attempt -- manufacturer.php id_manufacturer DELETE

sid 2004104 format suricata

Showing 51-100 of 6,060

Prev 2 Next

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin