Posted: May 8th, 2010 | Author: xanda | Filed under: IT Related | Tags: 0day, jsunpack, rule, safari, window.parent.close(), yara | 1 Comment »
rule SafariWindowParentClose
{
meta:
ref = "Safari window.parent.close()"
impact = 7
strings:
$SafariWindowParentClose_1 = /.*?.prompt\(alert\)/
$SafariWindowParentClose_2 = /.*?.prompt\(.*?\)/
$SafariWindowParentClose_3 = /.*?.close\(\)/
condition:
all of them
} |
rule SafariWindowParentClose
{
meta:
ref = "Safari window.parent.close()"
impact = 7
strings:
$SafariWindowParentClose_1 = /.*?.prompt\(alert\)/
$SafariWindowParentClose_2 = /.*?.prompt\(.*?\)/
$SafariWindowParentClose_3 = /.*?.close\(\)/
condition:
all of them
}
Posted: September 28th, 2009 | Author: xanda | Filed under: IT Related | Tags: Emerging Threats, oinkmaster, rule, snort | No Comments »
Matt Jonkman over at ET, has announced that they will be making some changes to the way their rules are categorised which will result in you needing to change your configuration.
[Read more HERE]