Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects Server-Side Request Forgery (SSRF) attempts targeting SonicWall SMA1000 WorkPlace endpoints. The rule monitors both HTTP GET query parameters and HTTP request bodies for patterns indicating attempts to redirect the application to internal loopback addresses or local network ranges (e.g., 127.0.0.1, 169.254.169.254, RFC1918 private subnets).
avatar
Ankit Mehta@Secvyn
avatar
Detections.ai Community
2 months ago
0010