External/patterns
1
0
Fork 0
mirror of https://github.com/fabriziosalmi/patterns.git synced 2025-12-29 16:15:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update: [Fri Feb 7 00:25:52 UTC 2025]

Browse Source
This commit is contained in:
github-actions[bot]
2025-02-07 00:25:52 +00:00
parent 1cebb95fc3
commit cf21042b9c
28 changed files with 2897 additions and 2885 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
waf_patterns/nginx/bots.conf
View File

@@ -99,6 +99,7 @@ map $http_user_agent $bad_bot {
"~*Badass" 1;
"~*Bandit" 1;
"~*Barkrowler" 1;
"~*Barracuda Sentinel \(EE\)" 1;
"~*BatchFTP" 1;
"~*Battleztar Bazinga" 1;
"~*Battleztar\ Bazinga" 1;
@@ -635,6 +636,7 @@ map $http_user_agent $bad_bot {
"~*Masscan" 1;
"~*Mata Hari" 1;
"~*Mata\ Hari" 1;
"~*MatchorySearch\/" 1;
"~*MauiBot" 1;
"~*Mb2345Browser" 1;
"~*MeanPath\ Bot" 1;
@@ -1369,6 +1371,7 @@ map $http_user_agent $bad_bot {
"~*^npm\/" 1;
"~*^pip\/" 1;
"~*^pnpm\/" 1;
"~*^symbolicator\/" 1;
"~*^twine\/" 1;
"~*^ureq" 1;
"~*a3logics\.in" 1;

552
waf_patterns/nginx/waf_maps.conf
View File

File diff suppressed because one or more lines are too long

114
waf_patterns/nginx/waf_rules.conf
View File

@@ -3,36 +3,6 @@
# Include this file inside server block
# WAF rules
if ($waf_block_lfi) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_attack) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_fixation) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_enforcement) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_exceptions) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_initialization) {
return 403;
# Log the blocked request (optional)
@@ -45,43 +15,19 @@
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_rce) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_leakages) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_evaluation) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_sql) {
if ($waf_block_exceptions) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_php) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_generic) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_xss) {
if ($waf_block_attack) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
@@ -93,13 +39,61 @@
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_sql) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_lfi) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_generic) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_fixation) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_php) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_sqli) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_correlation) {
if ($waf_block_leakages) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_xss) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_enforcement) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_rce) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
@@ -111,6 +105,12 @@
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_correlation) {
return 403;
# Log the blocked request (optional)
# access_log /var/log/nginx/waf_blocked.log;
}
if ($waf_block_shells) {
return 403;
# Log the blocked request (optional)