[Bro] Shellshock successful exploitation detection

Seth Hall seth at icir.org
Thu Sep 25 11:10:57 PDT 2014

I just pushed out an expanded take on a ShellShock detector that watches for successful exploitation.

It logs all of the possible attacks over HTTP in http.log too.


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

More information about the Bro mailing list