Added signature for Symantec Endpoint Protection Manager

0xsauby · Nov 23, 2015 · 0c75f1e · 0c75f1e
1 parent 584b18b
commit 0c75f1e
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 1 deletion.
diff --git a/signatures.yaml b/signatures.yaml
@@ -611,6 +611,12 @@ App_Name:
   vstring: ''
   exppath: './auxiliary/gather/drupal_openid_xxe.rb'
 
+Symantec Endpoint Protection Manager:
+  path1: '/servlet/ConsoleServlet'
+  path2: ''
+  vstring: ''
+  exppath: '/exploits/windows/http/sepm_auth_bypass_rce'
+
 Panasonic Network Camera WV-SF335:
   path1: '/live/index.html?Language=0'
   path2: '/admin/index.html?Language=0'

diff --git a/signatures_top.yaml b/signatures_top.yaml
@@ -45,4 +45,10 @@ MediaWiki:
   path1: '/mediawiki/index.php?title=Special:UserLogin&returnto=Main_Page'
   path2: ''
   vstring: ''
-  exppath: './exploits/multi/http/mediawiki_thumb.rb'
+  exppath: './exploits/multi/http/mediawiki_thumb.rb'
+
+Symantec Endpoint Protection Manager:
+  path1: '/servlet/ConsoleServlet'
+  path2: ''
+  vstring: ''
+  exppath: '/exploits/windows/http/sepm_auth_bypass_rce'