External/patterns
1
0
Fork 0
mirror of https://github.com/fabriziosalmi/patterns.git synced 2025-12-29 16:15:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update: [Sun Dec 29 23:20:18 UTC 2024]

Browse Source
This commit is contained in:
github-actions[bot]
2024-12-29 23:20:18 +00:00
parent 36f08db3eb
commit 3760d3dcde
35 changed files with 17042 additions and 1242 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
waf_patterns/nginx/shells.conf
View File

@@ -70,7 +70,7 @@ location / {
set $attack_detected 1;
}
if ($request_uri ~* "@rx ^<html>n<head>n<div align=") {
if ($request_uri ~* "@rx ^<html>n<head>n<div align="left"><font size="1">Input command :</font></div>n<form name="cmd" method="POST" enctype="multipart/form-data">") {
set $attack_detected 1;
}
@@ -82,7 +82,7 @@ location / {
set $attack_detected 1;
}
if ($request_uri ~* "@rx ^<html>rn<head>rn<meta http-equiv=") {
if ($request_uri ~* "@rx ^<html>rn<head>rn<meta http-equiv="Content-Type" content="text/html; charset=gb2312">rn<title>PhpSpy Ver [0-9]+</title>") {
set $attack_detected 1;
}
@@ -118,7 +118,7 @@ location / {
set $attack_detected 1;
}
if ($request_uri ~* "@contains <h1 style=") {
if ($request_uri ~* "@contains <h1 style="margin-bottom: 0">webadmin.php</h1>") {
set $attack_detected 1;
}