Commit 2e3da2fb by mmorenog Committed by GitHub

Update Blackhole_EK.yar

parent aedf7598
...@@ -116,7 +116,7 @@ condition: ...@@ -116,7 +116,7 @@ condition:
rule blackhole_basic : exploit_kit rule blackhole_basic : exploit_kit
{ {
strings: strings:
$a = /\.php\?\.*?\:[a-zA-Z0-9\:]{6,}\&\.*?\&/ $a = /\.php\?\.*\?\:[a-zA-Z0-9\:]{6,}\&\.*\?\&/
condition: condition:
$a $a
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment