MISC Meterpreter Java Payload Delivery

Rule ID

1134453

Severity

High

Description

The Meterpreter shell was set to use either a reverse HTTP(S) or reverse TCP connection. A reverse connection is one that comes from the compromised host to the C2 server.

Impact

Remote code execution

Recommendation

Update vendor's patch.

IPS Category

Exploits

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A