Tag Info

Hot answers tagged

3

An antivirus solution will usually not detect it, because these programs only scan files. In case of the shellshock exploit, no files are written to the servers filesystem. Depending on whether or not an intrusion detection system detects this attack depends on how uncommon the activity really is for the specific web application it is protecting, so there ...


3

The contents of a shellshock attack are technically valid web server requests. You could aggressively cull them (by looking for strings which could possibly be a shellshock attack and blocking them), but it would have limitations for legitimate applications (such as those which need to work with binary data that may happen to fit a shellshock signature). ...


1

The shellshock vulnerability is a bug found in bash. Antivirus will not find it because it is not a virus (it is a bug in a program). Intrusion Detection Systems (IDS's) will not usually detect a vulnerability such as this unless it is being actively exploited (e.g. an intrusion is happening). As indicated in other answers, an intrusion detection system ...


1

One idea (though it may or may not be correct) is that malware on your system could be trying to reach out to its creator (e.g. to send out information or to allow for your system to be used in a botnet). The * is typically used as a "wild card". For example, the domain www.abc.3d-game.com should be found by the *.3d-game.com query. The domains shown here ...



Only top voted, non community-wiki answers of a minimum length are eligible