Short Name |
HTTP:INFO-LEAK:WIN-INI |
---|---|
Severity |
Warning |
Recommended |
No |
Category |
HTTP |
Keywords |
win.ini Probe |
Release Date |
2005/01/05 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
This signature detects probes for the win.ini file, a Microsoft Windows configuration file. Attackers can attempt to edit or modify this file.
If a Hyper-Text Transfer Protocol (HTTP) request for win.ini is detected in network traffic, this could indicate that an attacker is attempting to gather information from the targeted host prior to making further penetration attempts.