Slight update to Neutrino Payloads

Slight change…also noticed by @Set_Abominae > http://pastebin.com/SFypQ0Q1

Neutrino JAR

HTTP Method = GET
Content-Type = application/java-archive
Regex HTTP URI for \/[A-Za-z0-9]{50,}(==?)?$

Neutrino EXE

HTTP Method = GET
Content-Type = application/octet-stream
Regex HTTP URI for \/[A-Za-z0-9]{50,}(==?)?$

Will have some FPs like globo.com, avast.com, etc.

Comments are closed.