Changeset 733

Show
Ignore:
Timestamp:
01/05/07 22:16:12 (2 years ago)
Author:
oxff
Message:

nepenthes.shellcode-signatures:
22:09 < common> und das pattern _strict_
22:09 < common> jeden char
22:09 < common> lappige patterns geben fp die man kaum findet

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved
  • nepenthes/trunk/modules/shellcode-signatures/shellcode-signatures.sc

    r732 r733  
    182182{ 
    183183        pattern 
    184         "(.*)(\\xEB.\\x5A\\x4A\\x31\\xC9\\xB1(.)\\x80..(.)\\xE2.\\xEB.\\xE8.)(.*)$"; 
     184        "(.*)(\\xEB\\x0E\\x5A\\x4A\\x31\\xC9\\xB1(.)\\x80\\x34\\x11(.)\\xE2\\xFA\\xEB\\x05\\xE8\\xED\xFF\xFF\xFF)(.*)$"; 
    185185        mapping (none,pre,decoder,size,key,post); 
    186186};