Snort mailing list archives

Linking this with that to create an alert


From: James Lay <jlay () slave-tothe-box net>
Date: Wed, 29 Jan 2014 09:06:17 -0700

All,

In looking at:

http://blog.spiderlabs.com/2014/01/beware-bats-hide-in-your-jquery-.html

I'm wondering if there's a way to, in plain English: "if I requested a 
jquery named file, and that file contains a document.write, then alert". 
Betting it's a flowbit thing, which I've not really used much.  Any 
good resources that could assist with something like this?  Thanks.

James

------------------------------------------------------------------------------
WatchGuard Dimension instantly turns raw network data into actionable 
security intelligence. It gives you real-time visual feedback on key
security issues and trends.  Skip the complicated setup - simply import
a virtual appliance and go from zero to informed in seconds.
http://pubads.g.doubleclick.net/gampad/clk?id=123612991&iu=/4140/ostg.clktrk
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!


Current thread: