Skip to content

Instantly share code, notes, and snippets.

@itsreallynick

itsreallynick/confession.rules

Created April 7, 2017 12:51
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save itsreallynick/c397a831638ece88781f3fcbc01bf4db to your computer and use it in GitHub Desktop.
Save itsreallynick/c397a831638ece88781f3fcbc01bf4db to your computer and use it in GitHub Desktop.
Download ZIP
They made me find you. They made me
Raw
confession.rules
# Detecting client or server guilt
alert icmp any any -> any any (msg:"Suspected Terrifying Confession"; content:"They made me"; pcre:"/(They made me (do|bop|twist|pull) it\.){60,}/i"; reference:url,https://twitter.com/ItsReallyNick/status/849641156153442305; sid:646965; rev:1;)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment