Felipe Zimmerle
|
49fc1f8b79
|
Fix memory leak on the benchmark utility
Now deleting the transaction object even if there is an intervention
|
2016-02-16 23:04:07 -03:00 |
|
Felipe Zimmerle
|
8647d63e90
|
Fix m accuracy initialization inside the Rule class
|
2016-02-15 15:47:36 -03:00 |
|
Felipe Zimmerle
|
a2ffb36159
|
Adds "matched" line to the audit logs
|
2016-02-12 13:28:43 -03:00 |
|
Felipe Zimmerle
|
362b376acb
|
Adds verbose logs to audit logs while deciding or not to save a request
|
2016-02-12 11:51:33 -03:00 |
|
Felipe Zimmerle
|
77a1dcab9b
|
parser: fix issue with skipAfter action
Considering \n and/or \r as the end of the token.
|
2016-02-11 16:42:39 -03:00 |
|
Felipe Zimmerle
|
049e4eb69d
|
Adds support to the @rbl operator
|
2016-02-11 14:25:58 -03:00 |
|
Felipe Zimmerle
|
4bdb4ed63a
|
Fix chained rules execution order
|
2016-02-10 14:29:45 -03:00 |
|
Felipe Zimmerle
|
8143f8ea89
|
Adds support to the action `maturity'
|
2016-02-10 13:55:12 -03:00 |
|
Felipe Zimmerle
|
714df8db20
|
Adds support to the action `accuracy'
|
2016-02-10 13:35:02 -03:00 |
|
Felipe Zimmerle
|
5a2a81a568
|
Adds support to the action `ver'
|
2016-02-10 12:53:22 -03:00 |
|
Felipe Zimmerle
|
77900ed4e2
|
Fix rules `messages' on the auditlog
|
2016-02-10 12:03:52 -03:00 |
|
Felipe Zimmerle
|
9474373264
|
General improvements on audit logs information
Making actions: msg, logdata, tag and others to work in the same
fashion that they work on ModSecurity v2.x
|
2016-02-05 15:19:53 -03:00 |
|
Chaim Sanders
|
31117d7577
|
Fix error on older systems
|
2016-01-25 10:15:45 -03:00 |
|
Felipe Zimmerle
|
b9b3e82900
|
Fix AuditLog parts selection
|
2016-01-21 15:03:47 -03:00 |
|
Felipe Zimmerle
|
9343942398
|
Adds mutex around the write operation on the auditlogs
|
2016-01-20 10:21:21 -03:00 |
|
Felipe Zimmerle
|
b4691aa748
|
Updates python bindings version
|
2016-01-18 13:53:17 -03:00 |
|
Felipe Zimmerle
|
b46dc34573
|
Temporarily disable the HTML ENTITY DECODE transformation
|
2016-01-18 13:48:00 -03:00 |
|
Felipe Zimmerle
|
a102b5ce2c
|
Improves the method fill the ARGS collection
|
2016-01-15 10:35:24 -03:00 |
|
Felipe Zimmerle
|
98f45f357a
|
Using a better number generator to avoid conflicts
|
2016-01-15 09:34:51 -03:00 |
|
Felipe Zimmerle
|
36dfe81da0
|
Adds YAJL_CFLAGS to the project core
|
2016-01-15 08:12:40 -03:00 |
|
Felipe Zimmerle
|
fc225ff001
|
Fix whoAmI() call on Transaction
|
2016-01-15 08:12:27 -03:00 |
|
Felipe Zimmerle
|
b06eaadac7
|
Places the classes related to audit log into a separate namespace
|
2016-01-14 14:29:36 -03:00 |
|
Felipe Zimmerle
|
2830525f89
|
Adds missing file: script.lua
|
2016-01-14 12:07:59 -03:00 |
|
Felipe Zimmerle
|
aaf995cc71
|
Adds missing file: transaction.h and removes assay.cc from git
|
2016-01-14 12:07:25 -03:00 |
|
Felipe Zimmerle
|
e45ad3b08e
|
Updates Python bindings git hash
|
2016-01-14 12:03:28 -03:00 |
|
Felipe Zimmerle
|
4db5cc7d26
|
Refactoring on Transaction class: adding comments and renaming variables
|
2016-01-14 12:02:59 -03:00 |
|
Felipe Zimmerle
|
6f1e6f37d7
|
Fix trasanction cleanup on the C API
|
2016-01-14 09:39:11 -03:00 |
|
Felipe Zimmerle
|
a51e707517
|
Renames class Assay to Transaction
|
2016-01-13 15:57:00 -03:00 |
|
Felipe Zimmerle
|
f3fd5d6621
|
Adds owasp/2 experiemntal rules on the test set for benchmark
|
2016-01-12 14:24:59 -03:00 |
|
Felipe Zimmerle
|
d780fd6290
|
Fix the parse to distinguish between @pm content and a variable
Before this patch the parser was not understanding @pm content that
contains a variable.
|
2016-01-12 13:59:27 -03:00 |
|
Felipe Zimmerle
|
702551ed42
|
Adds support to action `exec' to sec lang parser
|
2016-01-12 10:57:06 -03:00 |
|
Felipe Zimmerle
|
331df90bab
|
Enables OWASP CRS optional_rules on becnhmark test case
|
2016-01-12 10:50:38 -03:00 |
|
Felipe Zimmerle
|
923620fbd0
|
Adds support to the action `allow' in the sec parser
|
2016-01-12 10:42:36 -03:00 |
|
Felipe Zimmerle
|
7901c2c899
|
Adds the actions SetSID and SetUID to the seclang parser
|
2016-01-12 10:34:33 -03:00 |
|
Felipe Zimmerle
|
ab92bed6fa
|
Parser improvement: Supporting variables selection with regex
|
2016-01-12 09:59:33 -03:00 |
|
Felipe Zimmerle
|
3acc013e49
|
Improves the secrules parser
|
2016-01-11 17:50:35 -03:00 |
|
Felipe Zimmerle
|
ed13cab9f4
|
Adds script to download and configure benchmark script to use owasp v[3,2]
|
2016-01-11 17:50:15 -03:00 |
|
Felipe Zimmerle
|
f23908f145
|
Improves the secrules parser
|
2016-01-11 15:14:26 -03:00 |
|
Felipe Zimmerle
|
a4d8dfd5ee
|
Adds ModSecurity recommended configuration file
|
2016-01-11 13:56:14 -03:00 |
|
Chaim Sanders
|
29680d69aa
|
Updated geoip m4 file to support from path
|
2016-01-07 10:43:45 -03:00 |
|
Felipe Zimmerle
|
5273258261
|
Fix libxml configure script
|
2016-01-07 10:20:34 -03:00 |
|
Felipe Zimmerle
|
8c7b6199f7
|
Optimization on the tolower function
|
2016-01-07 09:16:06 -03:00 |
|
Felipe Zimmerle
|
0762892368
|
Small fix on pull request #982
|
2016-01-06 17:00:43 -03:00 |
|
Chaim Sanders
|
e38a468a26
|
Updated with suggestions from @zimmerle for code style
|
2016-01-06 17:00:43 -03:00 |
|
Chaim Sanders
|
b3ab9a4084
|
Support for correct implimentation of REQUEST_URI
|
2016-01-06 17:00:43 -03:00 |
|
Felipe Zimmerle
|
dd35b47764
|
Removes initcol debug messages
|
2016-01-06 17:00:43 -03:00 |
|
Felipe Zimmerle
|
a225f8b5b7
|
Fix SecResponseBodyMimeType test case
|
2016-01-06 17:00:43 -03:00 |
|
Chaim Sanders
|
6ebe6dfd87
|
Merge pull request #1038 from pwnbus/update_readme_shell_syntax
Update readme to use shell syntax
|
2015-12-29 15:21:38 -05:00 |
|
Brandon Myers
|
ebf2c88556
|
Update readme to use shell syntax
|
2015-12-29 15:19:15 -05:00 |
|
Felipe Zimmerle
|
decf04d264
|
Adds support to SecResponseBodyMimeType
|
2015-12-24 11:55:24 -03:00 |
|