Project

General

Profile

Actions
Copy link

Support #2475

closed

offset can also be a negative number?

Added by tag 7ym0n about 6 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
tag 7ym0n
Affected Versions:
Label:

Description

e.g:
http://localhost/?id=1&test=union select

rules:

alert tcp any any -> any any (msg:"test union select";content:"select";http_uri;nocase;offset:-7;content:"select";nocase;http_uri;classtype:test;sid:203456789;rev:1;)

it's ok,but not match.why?

Actions
Copy link

Also available in: Atom PDF