Discover and read the best of Twitter Threads about #struts
Most recents (2)
For flowbits in @snort 🐷, order matters:
In Suricata, flowbits:isset is checked after the fast pattern match but before other content matches.
In Snort, flowbits:isset is checked in the order it appears in the rule, from left to right.
Source: suricata.readthedocs.io/en/latest/rule…
In Suricata, flowbits:isset is checked after the fast pattern match but before other content matches.
In Snort, flowbits:isset is checked in the order it appears in the rule, from left to right.
Source: suricata.readthedocs.io/en/latest/rule…
@snort I really like using flowbits for exploitation attempts & responses.
I started doing this when tackling those massive #Struts vulns. And today we explained how to use them for CVE-2019-19781: fireeye.com/blog/products-…
I started doing this when tackling those massive #Struts vulns. And today we explained how to use them for CVE-2019-19781: fireeye.com/blog/products-…
@snort @_bromiley POP QUIZ: what does this do?
𝗱𝗶𝘀𝘁𝗮𝗻𝗰𝗲:-𝟭;
To see it in action, see our blog post: fireeye.com/blog/products-… (source of screenshot)
The next tweet has the answer.
𝗱𝗶𝘀𝘁𝗮𝗻𝗰𝗲:-𝟭;
To see it in action, see our blog post: fireeye.com/blog/products-… (source of screenshot)
The next tweet has the answer.
#Nmap comes with 586 #NSE scripts. 148 of them are default (-sC) or version (-sV) scripts. The rest (438) have to be invoked directly or by category, so many folks don't use them. Here are my top 18 NSE scripts you should run in 2018: #DiscoveringNSE
#DiscoveringNSE 1/18: Fingerprint 100s of web apps and embedded devices with http-enum. Got Nikto? http-enum uses that fingerprint file, too. nmap.org/nsedoc/scripts… Found a device with a web interface? Check for default creds with http-default-accounts. nmap.org/nsedoc/scripts…
#DiscoveringNSE 2/18: Import a list of targets to scan directly from the XML output of another scan with targets-xml. Lots of scripts that discover new addresses let you scan them in the same command with --script-args newtargets nmap.org/nsedoc/scripts…
