Network IDS rules · threatengine.sh

Home/Network IDS rules

IDS / IPS

Network IDS rules

52,690 rules · Snort / Suricata signatures

Network intrusion-detection signatures from open rulesets (ET Open, Snort Community, abuse.ch). These match malicious traffic patterns on the wire. A rule name links to its upstream reference where the ruleset publishes one; rules without a public reference show as plain text.

◈

Rules

50 shown of 52,690

et-open web-application-attack

ET WEB_SPECIFIC_APPS My Little Forum SQL Injection Attempt -- user.php id INSERT

sid 2004097 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS My Little Forum SQL Injection Attempt -- user.php id DELETE

sid 2004098 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS My Little Forum SQL Injection Attempt -- user.php id ASCII

sid 2004099 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS My Little Forum SQL Injection Attempt -- user.php id UPDATE

sid 2004100 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS cpCommerce SQL Injection Attempt -- manufacturer.php id_manufacturer SELECT

sid 2004101 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS cpCommerce SQL Injection Attempt -- manufacturer.php id_manufacturer UNION SELECT

sid 2004102 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS cpCommerce SQL Injection Attempt -- manufacturer.php id_manufacturer INSERT

sid 2004103 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS cpCommerce SQL Injection Attempt -- manufacturer.php id_manufacturer DELETE

sid 2004104 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS cpCommerce SQL Injection Attempt -- manufacturer.php id_manufacturer ASCII

sid 2004105 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS cpCommerce SQL Injection Attempt -- manufacturer.php id_manufacturer UPDATE

sid 2004106 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS gCards SQL Injection Attempt -- getnewsitem.php newsid SELECT

sid 2004108 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS gCards SQL Injection Attempt -- getnewsitem.php newsid UNION SELECT

sid 2004109 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS gCards SQL Injection Attempt -- getnewsitem.php newsid INSERT

sid 2004110 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS gCards SQL Injection Attempt -- getnewsitem.php newsid DELETE

sid 2004111 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS gCards SQL Injection Attempt -- getnewsitem.php newsid ASCII

sid 2004112 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS gCards SQL Injection Attempt -- getnewsitem.php newsid UPDATE

sid 2004113 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum SELECT

sid 2004128 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum UNION SELECT

sid 2004129 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum INSERT

sid 2004130 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum DELETE

sid 2004131 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum ASCII

sid 2004132 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum UPDATE

sid 2004133 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user SELECT

sid 2004134 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user UNION SELECT

sid 2004135 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user INSERT

sid 2004136 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user DELETE

sid 2004137 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user ASCII

sid 2004138 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user UPDATE

sid 2004139 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Weekly Drawing Contest SQL Injection Attempt -- check_vote.php order SELECT

sid 2004140 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Weekly Drawing Contest SQL Injection Attempt -- check_vote.php order UNION SELECT

sid 2004141 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Weekly Drawing Contest SQL Injection Attempt -- check_vote.php order INSERT

sid 2004142 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Weekly Drawing Contest SQL Injection Attempt -- check_vote.php order DELETE

sid 2004143 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Weekly Drawing Contest SQL Injection Attempt -- check_vote.php order ASCII

sid 2004144 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Weekly Drawing Contest SQL Injection Attempt -- check_vote.php order UPDATE

sid 2004145 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Jelsoft vBulletin SQL Injection Attempt -- attachment.php UNION SELECT

sid 2004147 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS JGBBS SQL Injection Attempt -- search.asp title SELECT

sid 2004152 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS JGBBS SQL Injection Attempt -- search.asp title UNION SELECT

sid 2004153 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS JGBBS SQL Injection Attempt -- search.asp title INSERT

sid 2004154 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS JGBBS SQL Injection Attempt -- search.asp title DELETE

sid 2004155 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS JGBBS SQL Injection Attempt -- search.asp title ASCII

sid 2004156 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS JGBBS SQL Injection Attempt -- search.asp title UPDATE

sid 2004157 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS NetVIOS Portal SQL Injection Attempt -- page.asp NewsID SELECT

sid 2004158 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS NetVIOS Portal SQL Injection Attempt -- page.asp NewsID UNION SELECT

sid 2004159 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS NetVIOS Portal SQL Injection Attempt -- page.asp NewsID INSERT

sid 2004160 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS NetVIOS Portal SQL Injection Attempt -- page.asp NewsID DELETE

sid 2004161 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS NetVIOS Portal SQL Injection Attempt -- page.asp NewsID ASCII

sid 2004162 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS NetVIOS Portal SQL Injection Attempt -- page.asp NewsID UPDATE

sid 2004163 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Minerva mod SQL Injection Attempt -- forum.php c SELECT

sid 2004164 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Minerva mod SQL Injection Attempt -- forum.php c UNION SELECT

sid 2004165 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Minerva mod SQL Injection Attempt -- forum.php c INSERT

sid 2004166 format suricata T1190 ↗

Showing 451-500 of 52,690

Prev 10 Next

SOC and Response
CVE triage
Stack monitoring
Am I affected
IOC triage
KEV catalog
Recently exploited
Daily brief
Change tracking

Detection Engineering
Coverage workspace
Detection coverage
Coverage check
Telemetry ceiling
SIEM query builder
Sigma rules
SIEM rules
YARA rules
Network rules
D3FEND

Threat Hunting
Threat actors
ATT&CK techniques
Attack paths
Indicators
Atomic tests

Red Team and Pentest
Exploitability triage
Recon pack
Attack paths
CAPEC patterns
Adversary emulation

Compliance and GRC
Framework mapping
Control assessment
Audit view

Atlas Search Threat actors Techniques Tools & malware CWE CAPEC KEV catalog Package vulns

About All capabilities Pricing API docs Privacy policy Terms of service

threatengine.sh