HTTP: win.ini Probe
This signature detects probes for the win.ini file, a Microsoft Windows configuration file. Attackers can attempt to edit or modify this file.
Extended Description
If a Hyper-Text Transfer Protocol (HTTP) request for win.ini is detected in network traffic, this could indicate that an attacker is attempting to gather information from the targeted host prior to making further penetration attempts.
Short Name
HTTP:INFO-LEAK:WIN-INI
Severity
Warning
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
Probe win.ini
Release Date
01/05/2005
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown