GammaWorm Fingerprint HTTP Headers
Detects curl.exe where system metadata is concatenated into User-Agent/Referer fields with specific delimiters.
YARA-L

Detects curl.exe where system metadata is concatenated into User-Agent/Referer fields with specific delimiters.

Already have an account?