Custom signature to detect malicious JavaScript

5creedus · ‎01-07-2008

Using "US-CERT Critical Infrastructure Information Notice CIIN-08-005-01 January 05, 2008" as the reference. I'd like to create a custom signature that looks for the string "0.js"

The effort is to determine if my webservers have been or will be impacted as we allow SQL querries and injection, but the servers are patched.

Thanks

shivapd · ‎01-11-2008

You can find information on using the custom signature wizard here: http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a0080618a2a.html

-- Shiva