PHP IDS
For those who haven't yet seen this, .mario and christ1an over at sla.ckers has been working on a PHP Intrusion Detection System and the results are fairly promising! The system is based on regular expressions and seems to catch everything I've jammed into it so far. Here's an example of catching a JavaScript event handler:
rule: (on\w+\s*=.*\\?([("|'|`)]|\>)?)
rule-description: detects possible event handlers
impact: 4
Check out the Google Group and the live sandbox for more.
PHP IDS was originally published by Martin Paul Eve at eve.gd: Martin Paul Eve on May 16, 2007.
Files
10.59348_9eapx-mqp60.pdf
Files
(97.7 kB)
| Name | Size | Download all |
|---|---|---|
|
md5:38de973877c9ed84ba7291ba881f261a
|
97.7 kB | Preview Download |
Additional details
Description
For those who haven't yet seen this, .mario and christ1an over at sla.ckers has been working on a PHP Intrusion Detection System and the results are fairly promising! The system is based on regular expressions and seems to catch everything I've jammed into it so far.
Identifiers
- GUID
- https://doi.org/10.59348/9eapx-mqp60
- URL
- https://eve.gd/2007/05/16/php-ids/
Dates
- Issued
-
2007-05-16T00:00:00Z
- Updated
-
2007-05-16T09:18:00Z