PwnDrp Web Server Access

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•1•0•22

Detects network requests to '/pwndrop/' URI paths, which are indicative of communication with a PwnDrp web server. PwnDrp is a tool developed for red team testing and is also known to be used for malicious activities, typically for command and control or data exfiltration.