File tree Expand file tree Collapse file tree 1 file changed +43
-0
lines changed Expand file tree Collapse file tree 1 file changed +43
-0
lines changed Original file line number Diff line number Diff line change
1
+ ### SecRemoteRules
2
+
3
+ {
4
+ type = > "misc" ,
5
+ comment = > "SecRemoteRules load" ,
6
+ conf = > qq (
7
+ SecRuleEngine On
8
+ SecDebugLog $ENV {DEBUG_LOG }
9
+ SecDebugLogLevel 9
10
+ SecRequestBodyAccess On
11
+ SecRemoteRules 123 "https://www.modsecurity.org/modsecurity-regression-test-secremoterules.txt"
12
+ ),
13
+ match_log = > {
14
+ error = > [ qr / ModSecurity : Loaded 1 rule / , 1 ],
15
+ },
16
+ },
17
+ {
18
+ type = > "misc" ,
19
+ comment = > "SecRemoteRules apply some remote rules" ,
20
+ conf = > qq (
21
+ SecRuleEngine On
22
+ SecDebugLog $ENV {DEBUG_LOG }
23
+ SecDebugLogLevel 9
24
+ SecRequestBodyAccess On
25
+ SecRemoteRules 123 "https://www.modsecurity.org/modsecurity-regression-test-secremoterules.txt"
26
+ ),
27
+ match_log = > {
28
+ error = > [ qr / ModSecurity : Warning . Matched phrase \"127.0.0.1\" at REQUEST_FILENAME ./ , 1 ],
29
+ debug = > [ qr / Matched phrase \"127.0.0.1\" at REQUEST_FILENAME / , 1 ],
30
+ },
31
+ match_response = > {
32
+ status = > qr / ^ 404 $/ ,
33
+ },
34
+ request = > new HTTP ::Request (
35
+ POST = > "http://$ENV{SERVER_NAME}:$ENV{SERVER_PORT}/127.0.0.1.html" ,
36
+ [
37
+ "Content-Type" = > "application/x-www-form-urlencoded" ,
38
+ ],
39
+ # Args
40
+ "some_variable=-1' and 1=1 union/* foo */select load_file('/etc/passwd')--"
41
+ ),
42
+ },
43
+
You can’t perform that action at this time.
0 commit comments