cgi.rules

IPv4和IPv6下发任意包的程序

var EXTERNAL_NET any
var HOME_NET any
var HTTP_SERVERS any

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS 80 (msg:"WEB-CGI wrap access"; flags: A+; content: "/cgi-bin/wrap?"; content: "../";reference:arachnids,464;)