Network IDS rules · threatengine.sh

Home/Network IDS rules

IDS / IPS

Network IDS rules

52,690 rules · Snort / Suricata signatures

Network intrusion-detection signatures from open rulesets (ET Open, Snort Community, abuse.ch). These match malicious traffic patterns on the wire. A rule name links to its upstream reference where the ruleset publishes one; rules without a public reference show as plain text.

◈

Rules

50 shown of 52,690

et-open web-application-attack

ET WEB_SPECIFIC_APPS Minerva mod SQL Injection Attempt -- forum.php c DELETE

sid 2004167 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Minerva mod SQL Injection Attempt -- forum.php c ASCII

sid 2004168 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS Minerva mod SQL Injection Attempt -- forum.php c UPDATE

sid 2004169 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- gallery.php image_id SELECT

sid 2004170 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- gallery.php image_id UNION SELECT

sid 2004171 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- gallery.php image_id INSERT

sid 2004172 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- gallery.php image_id DELETE

sid 2004173 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- gallery.php image_id ASCII

sid 2004174 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- gallery.php image_id UPDATE

sid 2004175 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- gallery.php cat_id SELECT

sid 2004176 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- gallery.php cat_id UNION SELECT

sid 2004177 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- gallery.php cat_id INSERT

sid 2004178 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- gallery.php cat_id DELETE

sid 2004179 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- gallery.php cat_id ASCII

sid 2004180 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- gallery.php cat_id UPDATE

sid 2004181 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- news.php news_id SELECT

sid 2004182 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- news.php news_id UNION SELECT

sid 2004183 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- news.php news_id INSERT

sid 2004184 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- news.php news_id DELETE

sid 2004185 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- news.php news_id ASCII

sid 2004186 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- news.php news_id UPDATE

sid 2004187 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- print.php news_id SELECT

sid 2004188 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- print.php news_id UNION SELECT

sid 2004189 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- print.php news_id INSERT

sid 2004190 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- print.php news_id DELETE

sid 2004191 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- print.php news_id ASCII

sid 2004192 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- print.php news_id UPDATE

sid 2004193 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- news.php news_cat_id SELECT

sid 2004194 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- news.php news_cat_id UNION SELECT

sid 2004195 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- news.php news_cat_id INSERT

sid 2004196 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- news.php news_cat_id DELETE

sid 2004197 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- news.php news_cat_id ASCII

sid 2004198 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- news.php news_cat_id UPDATE

sid 2004199 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php cat_id SELECT

sid 2004200 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php cat_id UNION SELECT

sid 2004201 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php cat_id INSERT

sid 2004202 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php cat_id DELETE

sid 2004203 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php cat_id ASCII

sid 2004204 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php cat_id UPDATE

sid 2004205 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php topic_id SELECT

sid 2004206 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php topic_id UNION SELECT

sid 2004207 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php topic_id INSERT

sid 2004208 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php topic_id DELETE

sid 2004209 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php topic_id ASCII

sid 2004210 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php topic_id UPDATE

sid 2004211 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php post_id SELECT

sid 2004212 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php post_id UNION SELECT

sid 2004213 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php post_id INSERT

sid 2004214 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php post_id DELETE

sid 2004215 format suricata T1190 ↗

et-open web-application-attack

ET WEB_SPECIFIC_APPS phpx SQL Injection Attempt -- forums.php post_id ASCII

sid 2004216 format suricata T1190 ↗

Showing 501-550 of 52,690

Prev 11 Next

SOC and Response
CVE triage
Stack monitoring
Am I affected
IOC triage
KEV catalog
Recently exploited
Daily brief
Change tracking

Detection Engineering
Coverage workspace
Detection coverage
Coverage check
Telemetry ceiling
SIEM query builder
Sigma rules
SIEM rules
YARA rules
Network rules
D3FEND

Threat Hunting
Threat actors
ATT&CK techniques
Attack paths
Indicators
Ransomware groups
Atomic tests

Red Team and Pentest
Exploitability triage
Recon pack
Attack paths
CAPEC patterns
Adversary emulation

Compliance and GRC
Framework mapping
Control assessment
Audit view

Atlas Search Threat actors Techniques Tools & malware CWE CAPEC KEV catalog Package vulns

About All capabilities Pricing API docs Privacy policy Terms of service

threatengine.sh