Kareem Dadu
@KareemSaudi ArabiaCompletionist
0 followers67 downloads15 copies4 likes71 views
2 detections
Filters
Last updated
All Time
Detection languages
2
Categories
2
2
1
Platforms
1
1
1
Products / Services
2
2
2
2
MITRE Techniques
2
1
1
1
1
Detects incoming web requests (via URI queries or form data) containing common OS command injection characters, shell metacharacters, or command execution patterns indicative of attempts to execute unauthorized commands on the underlying web server.
This rule monitors web server access logs for common attack patterns, including SQL injection, Cross-Site Scripting (XSS), Path Traversal/LFI, Remote File Inclusion (RFI), potential JNDI-based RCE (e.g., Log4Shell patterns), web shell activity, and sensitive endpoint discovery or enumeration (specifically targeting WordPress/CMS).