comparison maltfilter @ 115:91a5194de522

Add webcal to trigger strings.
author Matti Hamalainen <ccr@tnsp.org>
date Thu, 15 Nov 2012 09:06:54 +0200
parents 200aafa2e88d
children
comparison
equal deleted inserted replaced
114:200aafa2e88d 115:91a5194de522
115 my $mdate = $1; 115 my $mdate = $1;
116 my $mip = $2; 116 my $mip = $2;
117 my $merr = $3; 117 my $merr = $3;
118 if ($merr =~ /^File does not exist: (.+)$/) { 118 if ($merr =~ /^File does not exist: (.+)$/) {
119 my $tmp = $1; 119 my $tmp = $1;
120 if ($tmp =~ /\/mss2|\/pma|cpanel|admin|\/sql|mysql|websql|\/SSI.php|\/horde|\/rc$|\/xmlrpc.php|sqladm|dbadm|\/roundcube|\/webmail|\/mail|\/email|xampp|\/zen.*cart|\/cart|\/shop|\/store|mailto:|appserv|roundcube|_vti_bin|wiki|bugtrack|mantis|mantisbt|phpmanager|commerce|SID_box_notns_path|\/tinybrowser.php\?type=file\&folder=/i) { 120 if ($tmp =~ /\/mss2|\/pma|cpanel|admin|\/sql|mysql|websql|\/SSI.php|\/horde|\/rc$|\/xmlrpc.php|sqladm|dbadm|\/roundcube|\/webmail|\/mail|\/email|xampp|\/zen.*cart|\/cart|\/shop|\/store|mailto:|appserv|roundcube|_vti_bin|wiki|bugtrack|mantis|mantisbt|phpmanager|commerce|webcal|SID_box_notns_path|\/tinybrowser.php\?type=file\&folder=/i) {
121 check_add_hit($mip, $mdate, "CGI vuln scan", $tmp, 6, $settings{"CHK_KNOWN_CGI"}); 121 check_add_hit($mip, $mdate, "CGI vuln scan", $tmp, 6, $settings{"CHK_KNOWN_CGI"});
122 } 122 }
123 } 123 }
124 } 124 }
125 125