|
|
|||||||
| Home | Documentation | Download | Latest Rule File | Rule Database | Mailing List | Contact | ||
Rule Database ( GID35 )
| ID | GID35 |
| Revision | 1 |
| Name | UnixFileAccess(requestBody) |
| Type | decodedRequestBody |
| Pattern | /(bin|usr|etc|proc|opt|sbin|local|dev|tmp|kern|boot|root|sys)/ |
| Condition | match |
| Case Sensitive | yes |
| Log | yes |
| Action | none |
| Command | %req% |
| Description | Triggers when a Unix filename ( example: /usr/bin/perl ) in the HTTP request body is detected. ( /etc/passwd, /usr/local/bin ) |
| Credit | Kanatoko |
| Signature |