Home/Network IDS rules
IDS / IPS

Network IDS rules

52,690 rules · Snort / Suricata signatures
Network intrusion-detection signatures from open rulesets (ET Open, Snort Community, abuse.ch). These match malicious traffic patterns on the wire. A rule name links to its upstream reference where the ruleset publishes one; rules without a public reference show as plain text.
Ruleset All et-opensnort-community
Class All trojan-activitydomain-c2bad-unknownweb-application-attackmisc-activitycommand-and-controlattempted-adminexploit-kitsocial-engineeringcredential-theftattempted-usertargeted-activityattempted-reconpup-activity
◈

Rules

50 shown of 52,690
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php x INSERT
sid 2004267 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php x DELETE
sid 2004268 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php x ASCII
sid 2004269 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php x UPDATE
sid 2004270 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php t SELECT
sid 2004271 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php t UNION SELECT
sid 2004272 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php t INSERT
sid 2004273 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php t DELETE
sid 2004274 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php t ASCII
sid 2004275 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php t UPDATE
sid 2004276 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php productId SELECT
sid 2004277 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php productId UNION SELECT
sid 2004278 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php productId INSERT
sid 2004279 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php productId DELETE
sid 2004280 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php productId ASCII
sid 2004281 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php productId UPDATE
sid 2004282 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php sk SELECT
sid 2004283 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php sk UNION SELECT
sid 2004284 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php sk INSERT
sid 2004285 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php sk DELETE
sid 2004286 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php sk ASCII
sid 2004287 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php sk UPDATE
sid 2004288 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php x SELECT
sid 2004289 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php x UNION SELECT
sid 2004290 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php x INSERT
sid 2004291 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php x DELETE
sid 2004292 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php x ASCII
sid 2004293 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php x UPDATE
sid 2004294 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php so SELECT
sid 2004295 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php so UNION SELECT
sid 2004296 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php so INSERT
sid 2004297 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php so DELETE
sid 2004298 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php so ASCII
sid 2004299 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- product_review.php so UPDATE
sid 2004300 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- order-track.php orderNo SELECT
sid 2004301 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- order-track.php orderNo UNION SELECT
sid 2004302 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- order-track.php orderNo INSERT
sid 2004303 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- order-track.php orderNo DELETE
sid 2004304 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- order-track.php orderNo ASCII
sid 2004305 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Koan Software Mega Mall SQL Injection Attempt -- order-track.php orderNo UPDATE
sid 2004306 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS NukeSentinel SQL Injection Attempt -- nukesentinel.php SELECT
sid 2004307 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS NukeSentinel SQL Injection Attempt -- nukesentinel.php UNION SELECT
sid 2004308 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS NukeSentinel SQL Injection Attempt -- nukesentinel.php INSERT
sid 2004309 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS NukeSentinel SQL Injection Attempt -- nukesentinel.php DELETE
sid 2004310 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS NukeSentinel SQL Injection Attempt -- nukesentinel.php ASCII
sid 2004311 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS NukeSentinel SQL Injection Attempt -- nukesentinel.php UPDATE
sid 2004312 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Absolute Image Gallery SQL Injection Attempt -- gallery.asp categoryid SELECT
sid 2004319 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Absolute Image Gallery SQL Injection Attempt -- gallery.asp categoryid UNION SELECT
sid 2004320 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Absolute Image Gallery SQL Injection Attempt -- gallery.asp categoryid INSERT
sid 2004321 format suricata T1190 ↗
et-open web-application-attack
ET WEB_SPECIFIC_APPS Absolute Image Gallery SQL Injection Attempt -- gallery.asp categoryid DELETE
sid 2004322 format suricata T1190 ↗
Showing 601-650 of 52,690
Prev 13 Next
SOC and Response
CVE triage
Stack monitoring
Am I affected
IOC triage
KEV catalog
Recently exploited
Daily brief
Change tracking
Detection Engineering
Coverage workspace
Detection coverage
Coverage check
Telemetry ceiling
SIEM query builder
Sigma rules
SIEM rules
YARA rules
Network rules
D3FEND
Threat Hunting
Threat actors
ATT&CK techniques
Attack paths
Indicators
Ransomware groups
Atomic tests
Red Team and Pentest
Exploitability triage
Recon pack
Attack paths
CAPEC patterns
Adversary emulation
Compliance and GRC
Framework mapping
Control assessment
Audit view
Atlas Search Threat actors Techniques Tools & malware CWE CAPEC KEV catalog Package vulns
About All capabilities Pricing API docs Privacy policy Terms of service
threatengine.sh