Suricata / ET-open rules · threatengine.sh

Home/Detection rules/Suricata / ET-open

Tool

Network IDS

Suricata / ET-open

48,683 rules · network intrusion-detection signatures

Network intrusion-detection signatures from open rulesets (ET Open, Snort Community, abuse.ch). These match malicious traffic patterns on the wire. A rule name links to its upstream reference where the ruleset publishes one; rules without a public reference show as plain text.

◈

Rules

50 shown of 48,683

et-open web-application-attack

ET WEB_SPECIFIC_APPS PHP Labs JobSitePro SQL Injection Attempt -- search.php salary SELECT

sid 2004373 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS PHP Labs JobSitePro SQL Injection Attempt -- search.php salary UNION SELECT

sid 2004374 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS PHP Labs JobSitePro SQL Injection Attempt -- search.php salary INSERT

sid 2004375 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS PHP Labs JobSitePro SQL Injection Attempt -- search.php salary DELETE

sid 2004376 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS PHP Labs JobSitePro SQL Injection Attempt -- search.php salary ASCII

sid 2004377 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS PHP Labs JobSitePro SQL Injection Attempt -- search.php salary UPDATE

sid 2004378 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS fystyq Duyuru Scripti SQL Injection Attempt -- goster.asp id SELECT

sid 2004385 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS fystyq Duyuru Scripti SQL Injection Attempt -- goster.asp id UNION SELECT

sid 2004386 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS fystyq Duyuru Scripti SQL Injection Attempt -- goster.asp id INSERT

sid 2004387 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS fystyq Duyuru Scripti SQL Injection Attempt -- goster.asp id DELETE

sid 2004388 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS fystyq Duyuru Scripti SQL Injection Attempt -- goster.asp id ASCII

sid 2004389 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS fystyq Duyuru Scripti SQL Injection Attempt -- goster.asp id UPDATE

sid 2004390 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS GaziYapBoz Game Portal SQL Injection Attempt -- kategori.asp kategori SELECT

sid 2004397 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS GaziYapBoz Game Portal SQL Injection Attempt -- kategori.asp kategori UNION SELECT

sid 2004398 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS GaziYapBoz Game Portal SQL Injection Attempt -- kategori.asp kategori INSERT

sid 2004399 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS GaziYapBoz Game Portal SQL Injection Attempt -- kategori.asp kategori DELETE

sid 2004400 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS GaziYapBoz Game Portal SQL Injection Attempt -- kategori.asp kategori ASCII

sid 2004401 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS GaziYapBoz Game Portal SQL Injection Attempt -- kategori.asp kategori UPDATE

sid 2004402 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS WordPress SQL Injection Attempt -- admin-functions.php SELECT

sid 2004403 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS WordPress SQL Injection Attempt -- admin-functions.php UNION SELECT

sid 2004404 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS WordPress SQL Injection Attempt -- admin-functions.php INSERT

sid 2004405 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS WordPress SQL Injection Attempt -- admin-functions.php DELETE

sid 2004406 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS WordPress SQL Injection Attempt -- admin-functions.php ASCII

sid 2004407 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS WordPress SQL Injection Attempt -- admin-functions.php UPDATE

sid 2004408 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Serendipity SQL Injection Attempt -- index.php serendipity SELECT

sid 2004415 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Serendipity SQL Injection Attempt -- index.php serendipity UNION SELECT

sid 2004416 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Serendipity SQL Injection Attempt -- index.php serendipity INSERT

sid 2004417 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Serendipity SQL Injection Attempt -- index.php serendipity DELETE

sid 2004418 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Serendipity SQL Injection Attempt -- index.php serendipity ASCII

sid 2004419 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Serendipity SQL Injection Attempt -- index.php serendipity UPDATE

sid 2004420 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Hazir Site SQL Injection Attempt -- giris_yap.asp sifre SELECT

sid 2004421 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Hazir Site SQL Injection Attempt -- giris_yap.asp sifre UNION SELECT

sid 2004422 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Hazir Site SQL Injection Attempt -- giris_yap.asp sifre INSERT

sid 2004423 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Hazir Site SQL Injection Attempt -- giris_yap.asp sifre DELETE

sid 2004424 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Hazir Site SQL Injection Attempt -- giris_yap.asp sifre ASCII

sid 2004425 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Hazir Site SQL Injection Attempt -- giris_yap.asp sifre UPDATE

sid 2004426 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Mambo SQL Injection Attempt -- moscomment.php mcname SELECT

sid 2004427 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Mambo SQL Injection Attempt -- moscomment.php mcname UNION SELECT

sid 2004428 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Mambo SQL Injection Attempt -- moscomment.php mcname INSERT

sid 2004429 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Mambo SQL Injection Attempt -- moscomment.php mcname DELETE

sid 2004430 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Mambo SQL Injection Attempt -- moscomment.php mcname ASCII

sid 2004431 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Mambo SQL Injection Attempt -- moscomment.php mcname UPDATE

sid 2004432 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Mambo SQL Injection Attempt -- com_comment.php mcname SELECT

sid 2004433 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Mambo SQL Injection Attempt -- com_comment.php mcname UNION SELECT

sid 2004434 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Mambo SQL Injection Attempt -- com_comment.php mcname INSERT

sid 2004435 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Mambo SQL Injection Attempt -- com_comment.php mcname DELETE

sid 2004436 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Mambo SQL Injection Attempt -- com_comment.php mcname ASCII

sid 2004437 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Mambo SQL Injection Attempt -- com_comment.php mcname UPDATE

sid 2004438 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Web Wiz Forums SQL Injection Attempt -- pop_up_member_search.asp name ASCII

sid 2004439 format suricata T1190 ↗

et-open trojan-activity

ET MALWARE Banload User-Agent Detected (ExampleDL)

sid 2004440 format suricata

Showing 701-750 of 48,683

Prev 15 Next

SOC and Response
CVE triage
Stack monitoring
Am I affected
IOC triage
KEV catalog
Recently exploited
Daily brief
Change tracking

Detection Engineering
Coverage workspace
Detection coverage
Coverage check
Telemetry ceiling
SIEM query builder
Sigma rules
SIEM rules
YARA rules
Network rules
D3FEND

Threat Hunting
Threat actors
ATT&CK techniques
Attack paths
Indicators
Ransomware groups
Atomic tests

Red Team and Pentest
Exploitability triage
Recon pack
Attack paths
CAPEC patterns
Adversary emulation

Compliance and GRC
Framework mapping
Control assessment
Audit view

Atlas Search Threat actors Techniques Tools & malware CWE CAPEC KEV catalog Package vulns

About All capabilities Pricing API docs Privacy policy Terms of service

threatengine.sh