Signature Detail

SHELLCODE: Linux x64 Reverse TCP Stager Payload Over HTTP (CTS)

This signature detects malicious reverse tcp metasploit stager shellcode. A stager shellcode establishes a communication channel between the attacker and the victim and reads in a subsequent payload to execute on the remote host. Attempts to execute such shellcode indicate malicious activity.

References

• URL: http://www.rapid7.com/db/modules/payload/linux/x64/shell/reverse_tcp