Detections

Analysis of Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting

Bissa Scanner AI-Assisted Vulnerability Probing

sigma · generated; parse required before publication

title: Bissa Scanner AI-Assisted Vulnerability Probing
description: Detects automated high-velocity endpoint probing and credential harvesting
  payloads from Bissa Scanner.
logsource:
  product: webserver
  service: access
detection:
  selection:
    cs-method: POST
    cs-uri-stem: '*bissa_probe*'
  condition: selection
level: medium
tags: []
references: []

TOOL_SCANNER_Bissa_Agent

yara · compile required before publication

rule TOOL_SCANNER_Bissa_Agent {
  strings:
    $s1 = "bissa_exploit_engine" ascii wide nocase
    $s2 = "ai_payload_mutator_v1" ascii wide nocase
    $s3 = "auto_cve_fuzzing_harness" ascii wide nocase
  condition:
    any of them
}