Signature Detail
Short Name |
HTTP:MISC:WEEVELY |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Weevely Network Proxing Detection |
Release Date |
2012/09/14 |
Update Number |
2185 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Weevely Network Proxing Detection
This signature detects request send by Weevely, a php based remote access tool, from a remote malicious server to a compromised client to gain unauthorized access. Weevely has various capabilities like executing commands on remote victim, browsing file, run SQL command among others.
References