Search found 3 matches

by XLT_Frank
08 Oct 2013, 02:10
Forum: General Discussion (cmc)
Topic: Formatting For Whitelist?
Replies: 1
Views: 5163

Formatting For Whitelist?

I am used to rules that look like this. Does modsec2.whitelist.conf just follow the same whitelisting as it is pushed into the httpd.conf? Thanks, Frank <LocationMatch "/> SecRuleRemoveById 910006 # Google robot activity - Useful in someways but noisy for sites where you want them crawled SecRu...
by XLT_Frank
20 Sep 2013, 03:12
Forum: Suggestions (csf)
Topic: LFD Dectection for Symlinks & Base64
Replies: 2
Views: 3710

Re: LFD Dectection for Symlinks & Base64

I updated the thread to include base64 in files along with the command to find symlinks.
by XLT_Frank
18 Sep 2013, 03:40
Forum: Suggestions (csf)
Topic: LFD Dectection for Symlinks & Base64
Replies: 2
Views: 3710

LFD Dectection for Symlinks & Base64

UPDATED... Principle of operations is the same as detecting mailer scripts or change in binary files. The script would notify you when files with base64 are uploaded and needed for inspection or when symlinks are created within the /home directory. It is meant to help administrators administrators q...