2162 Commits

Author SHA1 Message Date
Felipe Zimmerle
49fc1f8b79 Fix memory leak on the benchmark utility
Now deleting the transaction object even if there is an intervention
2016-02-16 23:04:07 -03:00
Felipe Zimmerle
8647d63e90 Fix m accuracy initialization inside the Rule class 2016-02-15 15:47:36 -03:00
Felipe Zimmerle
a2ffb36159 Adds "matched" line to the audit logs 2016-02-12 13:28:43 -03:00
Felipe Zimmerle
362b376acb Adds verbose logs to audit logs while deciding or not to save a request 2016-02-12 11:51:33 -03:00
Felipe Zimmerle
77a1dcab9b parser: fix issue with skipAfter action
Considering \n and/or \r as the end of the token.
2016-02-11 16:42:39 -03:00
Felipe Zimmerle
049e4eb69d Adds support to the @rbl operator 2016-02-11 14:25:58 -03:00
Felipe Zimmerle
4bdb4ed63a Fix chained rules execution order 2016-02-10 14:29:45 -03:00
Felipe Zimmerle
8143f8ea89 Adds support to the action `maturity' 2016-02-10 13:55:12 -03:00
Felipe Zimmerle
714df8db20 Adds support to the action `accuracy' 2016-02-10 13:35:02 -03:00
Felipe Zimmerle
5a2a81a568 Adds support to the action `ver' 2016-02-10 12:53:22 -03:00
Felipe Zimmerle
77900ed4e2 Fix rules `messages' on the auditlog 2016-02-10 12:03:52 -03:00
Felipe Zimmerle
9474373264 General improvements on audit logs information
Making actions: msg, logdata, tag and others to work in the same
fashion that they work on ModSecurity v2.x
2016-02-05 15:19:53 -03:00
Chaim Sanders
31117d7577 Fix error on older systems 2016-01-25 10:15:45 -03:00
Felipe Zimmerle
b9b3e82900 Fix AuditLog parts selection 2016-01-21 15:03:47 -03:00
Felipe Zimmerle
9343942398 Adds mutex around the write operation on the auditlogs 2016-01-20 10:21:21 -03:00
Felipe Zimmerle
b4691aa748 Updates python bindings version 2016-01-18 13:53:17 -03:00
Felipe Zimmerle
b46dc34573 Temporarily disable the HTML ENTITY DECODE transformation 2016-01-18 13:48:00 -03:00
Felipe Zimmerle
a102b5ce2c Improves the method fill the ARGS collection 2016-01-15 10:35:24 -03:00
Felipe Zimmerle
98f45f357a Using a better number generator to avoid conflicts 2016-01-15 09:34:51 -03:00
Felipe Zimmerle
36dfe81da0 Adds YAJL_CFLAGS to the project core 2016-01-15 08:12:40 -03:00
Felipe Zimmerle
fc225ff001 Fix whoAmI() call on Transaction 2016-01-15 08:12:27 -03:00
Felipe Zimmerle
b06eaadac7 Places the classes related to audit log into a separate namespace 2016-01-14 14:29:36 -03:00
Felipe Zimmerle
2830525f89 Adds missing file: script.lua 2016-01-14 12:07:59 -03:00
Felipe Zimmerle
aaf995cc71 Adds missing file: transaction.h and removes assay.cc from git 2016-01-14 12:07:25 -03:00
Felipe Zimmerle
e45ad3b08e Updates Python bindings git hash 2016-01-14 12:03:28 -03:00
Felipe Zimmerle
4db5cc7d26 Refactoring on Transaction class: adding comments and renaming variables 2016-01-14 12:02:59 -03:00
Felipe Zimmerle
6f1e6f37d7 Fix trasanction cleanup on the C API 2016-01-14 09:39:11 -03:00
Felipe Zimmerle
a51e707517 Renames class Assay to Transaction 2016-01-13 15:57:00 -03:00
Felipe Zimmerle
f3fd5d6621 Adds owasp/2 experiemntal rules on the test set for benchmark 2016-01-12 14:24:59 -03:00
Felipe Zimmerle
d780fd6290 Fix the parse to distinguish between @pm content and a variable
Before this patch the parser was not understanding @pm content that
contains a variable.
2016-01-12 13:59:27 -03:00
Felipe Zimmerle
702551ed42 Adds support to action `exec' to sec lang parser 2016-01-12 10:57:06 -03:00
Felipe Zimmerle
331df90bab Enables OWASP CRS optional_rules on becnhmark test case 2016-01-12 10:50:38 -03:00
Felipe Zimmerle
923620fbd0 Adds support to the action `allow' in the sec parser 2016-01-12 10:42:36 -03:00
Felipe Zimmerle
7901c2c899 Adds the actions SetSID and SetUID to the seclang parser 2016-01-12 10:34:33 -03:00
Felipe Zimmerle
ab92bed6fa Parser improvement: Supporting variables selection with regex 2016-01-12 09:59:33 -03:00
Felipe Zimmerle
3acc013e49 Improves the secrules parser 2016-01-11 17:50:35 -03:00
Felipe Zimmerle
ed13cab9f4 Adds script to download and configure benchmark script to use owasp v[3,2] 2016-01-11 17:50:15 -03:00
Felipe Zimmerle
f23908f145 Improves the secrules parser 2016-01-11 15:14:26 -03:00
Felipe Zimmerle
a4d8dfd5ee Adds ModSecurity recommended configuration file 2016-01-11 13:56:14 -03:00
Chaim Sanders
29680d69aa Updated geoip m4 file to support from path 2016-01-07 10:43:45 -03:00
Felipe Zimmerle
5273258261 Fix libxml configure script 2016-01-07 10:20:34 -03:00
Felipe Zimmerle
8c7b6199f7 Optimization on the tolower function 2016-01-07 09:16:06 -03:00
Felipe Zimmerle
0762892368 Small fix on pull request #982 2016-01-06 17:00:43 -03:00
Chaim Sanders
e38a468a26 Updated with suggestions from @zimmerle for code style 2016-01-06 17:00:43 -03:00
Chaim Sanders
b3ab9a4084 Support for correct implimentation of REQUEST_URI 2016-01-06 17:00:43 -03:00
Felipe Zimmerle
dd35b47764 Removes initcol debug messages 2016-01-06 17:00:43 -03:00
Felipe Zimmerle
a225f8b5b7 Fix SecResponseBodyMimeType test case 2016-01-06 17:00:43 -03:00
Chaim Sanders
6ebe6dfd87 Merge pull request #1038 from pwnbus/update_readme_shell_syntax
Update readme to use shell syntax
2015-12-29 15:21:38 -05:00
Brandon Myers
ebf2c88556 Update readme to use shell syntax 2015-12-29 15:19:15 -05:00
Felipe Zimmerle
decf04d264 Adds support to SecResponseBodyMimeType 2015-12-24 11:55:24 -03:00