Logical, syntax and cosmetic fixes on test cases

This commit is contained in:
Ervin Hegedus 2024-02-11 10:14:40 +01:00
parent ca5f5163b4
commit ed811f1062
No known key found for this signature in database
GPG Key ID: 5FA5BC3F5EC41F61
7 changed files with 18 additions and 18 deletions

View File

@ -18,7 +18,7 @@
"Cookie": "PHPSESSID=rAAAAAAA2t5uvjq435r4q7ib3vtdjq120", "Cookie": "PHPSESSID=rAAAAAAA2t5uvjq435r4q7ib3vtdjq120",
"Content-Type": "text/xml" "Content-Type": "text/xml"
}, },
"uri":"/wp-login.php?whee&pwd=lhebs", "uri":"/wp-login.php?whee=something&pwd=lhebs",
"method":"GET", "method":"GET",
"body": [ ] "body": [ ]
}, },
@ -28,7 +28,7 @@
}, },
"rules":[ "rules":[
"SecRule REQUEST_FILENAME \"@endsWith /wp-login.php\" \"id:9002100,phase:2,t:none,nolog,pass,ctl:ruleRemoveById=1\"", "SecRule REQUEST_FILENAME \"@endsWith /wp-login.php\" \"id:9002100,phase:2,t:none,nolog,pass,ctl:ruleRemoveById=1\"",
"SecRule ARGS \"@contais whe\" \"id:1,phase:3,t:none,nolog,pass,tag:'CRS'\"" "SecRule ARGS_NAMES \"@contains whee\" \"id:1,phase:3,t:none,nolog,pass,tag:'CRS'\""
] ]
}, },
{ {
@ -36,7 +36,7 @@
"version_min":300000, "version_min":300000,
"title":"Testing CtlRuleRemoteById (2)", "title":"Testing CtlRuleRemoteById (2)",
"expected":{ "expected":{
"debug_log": "Target value: .*Variable: ARGS:pwd" "debug_log": "Target value: .*Variable: ARGS_NAMES:whee"
}, },
"client":{ "client":{
"ip":"200.249.12.31", "ip":"200.249.12.31",
@ -50,7 +50,7 @@
"Cookie": "PHPSESSID=rAAAAAAA2t5uvjq435r4q7ib3vtdjq120", "Cookie": "PHPSESSID=rAAAAAAA2t5uvjq435r4q7ib3vtdjq120",
"Content-Type": "text/xml" "Content-Type": "text/xml"
}, },
"uri":"/wp-login.php?whee&pwd=lhebs", "uri":"/wp-login.php?whee=something&pwd=lhebs",
"method":"GET", "method":"GET",
"body": [ ] "body": [ ]
}, },
@ -60,7 +60,7 @@
}, },
"rules":[ "rules":[
"SecRule REQUEST_FILENAME \"@endsWith /wp-login.php\" \"id:9002100,phase:2,t:none,nolog,pass,ctl:ruleRemoveById=123\"", "SecRule REQUEST_FILENAME \"@endsWith /wp-login.php\" \"id:9002100,phase:2,t:none,nolog,pass,ctl:ruleRemoveById=123\"",
"SecRule ARGS \"@contais whe\" \"id:1,phase:3,t:none,nolog,pass,tag:'CRS2'\"" "SecRule ARGS_NAMES \"@contains whee\" \"id:1,phase:3,t:none,nolog,pass,tag:'CRS2'\""
] ]
} }
] ]

View File

@ -34,7 +34,7 @@
"debug_log":"Skipped rule id '2'. Skipped due to a ruleRemoveByTag action." "debug_log":"Skipped rule id '2'. Skipped due to a ruleRemoveByTag action."
}, },
"rules":[ "rules":[
"SecRule ARGS:key \".\" \"id:4,ctl:ruleRemoveByTag=tag123", "SecRule ARGS:key \".\" \"id:4,ctl:ruleRemoveByTag=tag123\"",
"SecRule ARGS \"@contains test1\" \"id:1,pass,t:trim\"", "SecRule ARGS \"@contains test1\" \"id:1,pass,t:trim\"",
"SecRule ARGS \"@contains test2\" \"id:2,pass,t:trim,tag:tag123\"", "SecRule ARGS \"@contains test2\" \"id:2,pass,t:trim,tag:tag123\"",
"SecRule ARGS \"@contains test3\" \"id:3,pass,t:trim\"" "SecRule ARGS \"@contains test3\" \"id:3,pass,t:trim\""

View File

@ -37,7 +37,7 @@
"version_min":300000, "version_min":300000,
"title":"Testing CtlRuleRemoveTargetById (2)", "title":"Testing CtlRuleRemoveTargetById (2)",
"expected":{ "expected":{
"debug_log": "Target value: .*Variable: ARGS:pwd" "debug_log": "Target value: .*Variable: ARGS_NAMES:whee"
}, },
"client":{ "client":{
"ip":"200.249.12.31", "ip":"200.249.12.31",
@ -51,7 +51,7 @@
"Cookie": "PHPSESSID=rAAAAAAA2t5uvjq435r4q7ib3vtdjq120", "Cookie": "PHPSESSID=rAAAAAAA2t5uvjq435r4q7ib3vtdjq120",
"Content-Type": "text/xml" "Content-Type": "text/xml"
}, },
"uri":"/wp-login.php?whee&pwd=lhebs", "uri":"/wp-login.php?whee=something&pwd=lhebs",
"method":"GET", "method":"GET",
"body": [ ] "body": [ ]
}, },
@ -61,7 +61,7 @@
}, },
"rules":[ "rules":[
"SecRule REQUEST_FILENAME \"@endsWith /wp-login.php\" \"id:9002100,phase:2,t:none,nolog,pass,ctl:ruleRemoveTargetById=123;ARGS:pwd\"", "SecRule REQUEST_FILENAME \"@endsWith /wp-login.php\" \"id:9002100,phase:2,t:none,nolog,pass,ctl:ruleRemoveTargetById=123;ARGS:pwd\"",
"SecRule ARGS \"@contais whe\" \"id:1,phase:3,t:none,nolog,pass,tag:'CRS2'\"" "SecRule ARGS_NAMES \"@contains whee\" \"id:1,phase:3,t:none,nolog,pass,tag:'CRS2'\""
] ]
}, },
{ {
@ -83,7 +83,7 @@
"Cookie": "PHPSESSID=rAAAAAAA2t5uvjq435r4q7ib3vtdjq120", "Cookie": "PHPSESSID=rAAAAAAA2t5uvjq435r4q7ib3vtdjq120",
"Content-Type": "text/xml" "Content-Type": "text/xml"
}, },
"uri":"/wp-login.php?whee&pwd=lhebs", "uri":"/wp-login.php?whee=something&pwd=lhebs",
"method":"GET", "method":"GET",
"body": [ ] "body": [ ]
}, },

View File

@ -37,7 +37,7 @@
"version_min":300000, "version_min":300000,
"title":"Testing CtlRuleRemoteTargetByTag (2)", "title":"Testing CtlRuleRemoteTargetByTag (2)",
"expected":{ "expected":{
"debug_log": "Target value: .*Variable: ARGS:pwd" "debug_log": "Target value: .*Variable: ARGS_NAMES:pwd"
}, },
"client":{ "client":{
"ip":"200.249.12.31", "ip":"200.249.12.31",
@ -61,7 +61,7 @@
}, },
"rules":[ "rules":[
"SecRule REQUEST_FILENAME \"@endsWith /wp-login.php\" \"id:9002100,phase:2,t:none,nolog,pass,ctl:ruleRemoveTargetByTag=CRS;ARGS:pwd\"", "SecRule REQUEST_FILENAME \"@endsWith /wp-login.php\" \"id:9002100,phase:2,t:none,nolog,pass,ctl:ruleRemoveTargetByTag=CRS;ARGS:pwd\"",
"SecRule ARGS \"@contais whe\" \"id:1,phase:3,t:none,nolog,pass,tag:'CRS2'\"" "SecRule ARGS_NAMES \"@contains pwd\" \"id:1,phase:3,t:none,nolog,pass,tag:'CRS2'\""
] ]
}, },
{ {
@ -69,7 +69,7 @@
"version_min":300000, "version_min":300000,
"title":"Testing CtlRuleRemoteTargetByTag (3)", "title":"Testing CtlRuleRemoteTargetByTag (3)",
"expected":{ "expected":{
"debug_log": "Target value: .*Variable: ARGS:pwd" "debug_log": "Target value: .*Variable: ARGS_NAMES:whee"
}, },
"client":{ "client":{
"ip":"200.249.12.31", "ip":"200.249.12.31",
@ -83,7 +83,7 @@
"Cookie": "PHPSESSID=rAAAAAAA2t5uvjq435r4q7ib3vtdjq120", "Cookie": "PHPSESSID=rAAAAAAA2t5uvjq435r4q7ib3vtdjq120",
"Content-Type": "text/xml" "Content-Type": "text/xml"
}, },
"uri":"/wp-login.php?whee&pwd=lhebs", "uri":"/wp-login.php?whee=something&pwd=lhebs",
"method":"GET", "method":"GET",
"body": [ ] "body": [ ]
}, },
@ -93,7 +93,7 @@
}, },
"rules":[ "rules":[
"SecRule REQUEST_FILENAME \"@endsWith /wp-login.php\" \"id:9002100,phase:2,t:none,nolog,pass,ctl:ruleRemoveTargetByTag=CRS;ARGS\"", "SecRule REQUEST_FILENAME \"@endsWith /wp-login.php\" \"id:9002100,phase:2,t:none,nolog,pass,ctl:ruleRemoveTargetByTag=CRS;ARGS\"",
"SecRule ARGS \"@contais whe\" \"id:1,phase:3,t:none,nolog,pass,tag:'CRS2'\"" "SecRule ARGS_NAMES \"@contains whee\" \"id:1,phase:3,t:none,nolog,pass,tag:'CRS2'\""
] ]
} }
] ]

View File

@ -44,7 +44,7 @@
"rules": [ "rules": [
"SecRuleEngine On", "SecRuleEngine On",
"SecDefaultAction \"phase:1,status:404,deny\"", "SecDefaultAction \"phase:1,status:404,deny\"",
"SecRule REQUEST_URI \"@contains /\" \"id:2000001,phase:1,log,redirect:'http://1.1.1.1/failed.html',t:none,msg:\"Unauthorized administrator request'\"" "SecRule REQUEST_URI \"@contains /\" \"id:2000001,phase:1,log,redirect:'http://1.1.1.1/failed.html',t:none,msg:'Unauthorized administrator request'\""
] ]
} }
] ]

View File

@ -34,7 +34,7 @@
"debug_log":"t:lowercase:" "debug_log":"t:lowercase:"
}, },
"rules":[ "rules":[
"SecRule \"REQUEST_LINE\" \"@contains index.php/admin/cms/wysiwyg/directive/\" \"id:1,t:lowercase,ctl:auditLogParts=+E\"" "SecRule \"REQUEST_LINE\" \"@contains index.php/admin/cms/wysiwyg/directive/\" \"id:1,phase:1,t:lowercase,ctl:auditLogParts=+E\""
] ]
}, },
{ {