Short Name |
SSH:MISC:EXPLOIT-CMDS-UNIX |
---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
SSH |
Keywords |
UNIX Post-Exploit Commands |
Release Date |
2003/10/15 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
This signature detects common commands sent in the clear (unencrypted). Attackers often use these commands to verify that they have successfully exploited an SSH vulnerability.
An attacker could send commands to gage the level of access granted and then begin using the compromised system.