This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About kowu
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About kowu
06-28-2020
5Posts
1Like
0Solutions
Jun 28, 2020Last Visited
User
Activity
User
Profile
Latest posts by kowu
| Subject | Views | Posted |
|---|---|---|
| 12043 | 01-14-2018 12:02 AM | |
| 2945 | 11-09-2016 10:51 AM | |
| 2953 | 11-09-2016 05:16 AM | |
| 2955 | 11-09-2016 05:13 AM | |
| 2986 | 11-09-2016 12:58 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 01-14-2018 12:02 AM |
User Badges
Community Statistics
| Member Since | 06-10-2014 11:08 AM |
| Date Last Visited | 06-28-2020 09:55 AM |
| Posts | 5 |
| Total Likes Received | 1 |
01-14-2018
12:02 AM
1 Kudo
I have the same issue with this, Why have lots of this issue.
... View more
11-09-2016
05:16 AM
please filter the ip address in the pcap file Attacker:10.63.212.201 http server:10.10.228.94
... View more
11-09-2016
05:13 AM
Thanks luck! it is related with Jboss CVE vul(Red Hat JBoss Commons Collections Library Remote Code Execution Vulnerability) ID 38507, Customer want a custom signature to combine this CVE with the related reply session from the vicitm which means the attack is most likely successful let's if the attack session hit the CVE, while the response traffic in the session from vicitm contain "http 1.1 200 ok" means the attack session is established or successful this signature is to create a signature that can match the reply/response traffic and combine them, Attacker:10.63.212.201 vicitm:10.10.228.94 (reponse traffic should be from 10.10.228.94 to 10.63.212.201)
... View more
11-09-2016
12:58 AM
Dear Bros Anyone has the experience of create custom signature base on the return traffic? attached please find the PCAP file This is JBoss attack while custom want us to alert base on the server return traffic content pattern which means attack most likely successful Attacker:10.63.212.201 server:10.10.228.94
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks