https://live.paloaltonetworks.com/t5/custom-signatures/vulnerability-custom-signature-not-detected/m-p/293735#M328 <P>Hi,</P><P>I have configured this signature:</P><P>Operator:&nbsp;Pattern Match</P><P>Context:&nbsp;http-req-params</P><P>Pattern:&nbsp;WAITFOR\%20DELAY</P><P>&nbsp;</P><P>When I digit for example <STRONG><A href="http://www.mysite.com/index.php?WAITFOR%20DELAY" target="_blank">http://www.mysite.com/index.php?WAITFOR%20DELAY</A></STRONG> the signature is not matched.</P><P>Can someone help me about this?</P><P>&nbsp;</P><P>&nbsp;</P> Tue, 22 Oct 2019 15:42:20 GMT s_quasar 2019-10-22T15:42:20Z https://live.paloaltonetworks.com/t5/custom-signatures/vulnerability-custom-signature-not-detected/m-p/293735#M328 <P>Hi,</P><P>I have configured this signature:</P><P>Operator:&nbsp;Pattern Match</P><P>Context:&nbsp;http-req-params</P><P>Pattern:&nbsp;WAITFOR\%20DELAY</P><P>&nbsp;</P><P>When I digit for example <STRONG><A href="http://www.mysite.com/index.php?WAITFOR%20DELAY" target="_blank">http://www.mysite.com/index.php?WAITFOR%20DELAY</A></STRONG> the signature is not matched.</P><P>Can someone help me about this?</P><P>&nbsp;</P><P>&nbsp;</P> Tue, 22 Oct 2019 15:42:20 GMT https://live.paloaltonetworks.com/t5/custom-signatures/vulnerability-custom-signature-not-detected/m-p/293735#M328 s_quasar 2019-10-22T15:42:20Z https://live.paloaltonetworks.com/t5/custom-signatures/vulnerability-custom-signature-not-detected/m-p/294132#M329 <P>Solved. You have to use \s for the space instead of %20</P> Thu, 24 Oct 2019 15:52:59 GMT https://live.paloaltonetworks.com/t5/custom-signatures/vulnerability-custom-signature-not-detected/m-p/294132#M329 s_quasar 2019-10-24T15:52:59Z