26Şub
Snort content syntax
Is it possible to use the symbols <, /, >, space, in the content option of a Snort rule? Or should I use URL encoding instead? Which syntax is correct?
content:"%3Cscript%20"
content:"<script src"
content:"</script>"