Coverage for CVE-2021-44248 Log4Shell Log4j Update

nturley3 · Dec 10, 2021 · 2eb8d11 · 2eb8d11
1 parent ac1acb0
commit 2eb8d11
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/scripts/http_rce.zeek b/scripts/http_rce.zeek
@@ -57,7 +57,7 @@ export {
     /(str_replace[[:space:]]*?\+*?\()/i |
     /(file_get_contents[[:space:]]*?\+*?\()/i | #Example: $code = file_get_contents('https://pastebin[.]com/raw/63LjCNAs');
     /(PHP Obfuscator)/ |
-    /\$jndi:/i | # Based on https://nakedsecurity.sophos.com/2021/12/10/log4shell-java-vulnerability-how-to-safeguard-your-servers/
+    /jndi:/i | # Based on https://nakedsecurity.sophos.com/2021/12/10/log4shell-java-vulnerability-how-to-safeguard-your-servers/
     # /(\?\>)/ | Too many false positives. Legitimate XML Ending
     # /(\%\>)/ | Too many false positives.