Xanda's Blog !~!

Yara Rule for CVE-2010-1885

Jun
11
 
rule HelpSupportCenter
{
   meta:  
      ref = "CVE-2010-1885"
      hide = true
      impact = 5 
   strings:
      $cve20101885 = /hcp:\/\/.*?(%u?[A-F]{1,4}.*?){90}/
   condition:
       all of them
}
IT Related , , , 3 Comments

3 Responses to Yara Rule for CVE-2010-1885

Leave a Reply

Your email address will not be published. Required fields are marked *