ByroeNet / Casper Bot Search – e107 RCE scanner

Emerging Threats has provide, the 9 July, new Snort signatures (2011175 and 2011176) related to emerging attack attempts. These two signatures are categorized into the USER AGENTS recognition category, and identified as Remote File Inclusion scanners (see the discussion on ET mailing-list). The detection is done on “Casper Bot Search” and “MaMa CaSpEr” strings in … Continue reading ByroeNet / Casper Bot Search – e107 RCE scanner