/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache
#!/usr/bin/lua local function has_value (table, val) for index=1,#table do if table[index] == val then return true end end return false end local function shorten(value, maxlen) if (string.len(value) > maxlen) and (maxlen > 3) then return string.sub(value, 1, maxlen - 3) .. "..." else return value end end local function concat_args(ARGS) local args = "" local skip_arguments = {"_wpnonce", "_wp_http_referer"} for k,v in pairs(ARGS) do name = v["name"]; name = string.gsub(name, "ARGS_GET:(.*)", "%1"); name = string.gsub(name, "ARGS_POST:(.*)", "%1"); name = string.gsub(name, "FILES:(.*)", "%1"); if not has_value(skip_arguments, name) then value = v["value"]; --m.log(1, "Arg Name: " ..name.. " and Value: " ..value.. "."); if string.len(args) < 1000 then args = args .. shorten(name, 20) .. "=" .. shorten(value, 200) .."&"; end end end return args; end function main() local args_get = concat_args(m.getvars("ARGS_GET")); local args_post = concat_args(m.getvars("ARGS_POST")); local args_file = concat_args(m.getvars("FILES")); m.setvar("TX.trapped", "1"); m.setvar("TX.trapinfo", "G:" .. args_get .. " P:" .. args_post .. " F:" .. args_file); return nil; end
.
Edit
..
Edit
000_i360_init.conf
Edit
001_i360_pass.conf
Edit
002_i360_basic.conf
Edit
003_i360_wp_logic.conf
Edit
004_i360_vectors.conf
Edit
005_i360_bruteforce.conf
Edit
006_i360_malware.conf
Edit
007_i360_custom.conf
Edit
008_i360_wordpress.conf
Edit
009_i360_joomla.conf
Edit
010_i360_drupal.conf
Edit
011_i360_otherapps.conf
Edit
012_i360_spam.conf
Edit
013_i360_generic.conf
Edit
014_i360_infectors.conf
Edit
015_i360_filescan.conf
Edit
016_i360_monitor.conf
Edit
017_i360_weak_pass.conf
Edit
018_Disable_WP_Redirect.conf
Edit
IM360-LICENSE.txt
Edit
RELEASE
Edit
VERSION
Edit
bl_agents
Edit
bl_chains
Edit
bl_db_list
Edit
bl_db_list_ext
Edit
bl_ips
Edit
bl_os_files
Edit
bl_path_files
Edit
bl_scanners
Edit
bl_uri
Edit
bl_web_files
Edit
bl_wpboost_uri
Edit
bl_xss_input
Edit
changelog.json
Edit
changelog.txt
Edit
cloudav_list
Edit
crawlers-google-iplist.data
Edit
crawlers-iplist.data
Edit
crawlers-ualist.data
Edit
danme_top100
Edit
detectlua.lua
Edit
inspectfile.lua
Edit
ip-record.db
Edit
java_data
Edit
malware_found.list
Edit
malware_found_b64.list
Edit
malware_standalone.list
Edit
malware_standalone_b64.list
Edit
path_traversal
Edit
php_data
Edit
rbl_whitelist
Edit
rce_uri
Edit
risky-actions.list
Edit
trap.lua
Edit
trap_cookie.lua
Edit
userdata_dirb_URLs.data
Edit