Skip to content

nightly

nightly: feat: rule to detect bash tilde expansion (#3765)
@Xhoenix Xhoenix tagged this 23 Jul 18:03 
* feat: rule to detect bash tilde expansion

* added 932150 regex assembly and tests

* format 932150.ra

* minor fixes

* regex update

* update rule ID

* Update rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf

Co-authored-by: Max Leske <250711+theseion@users.noreply.github.com>

* Update rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf

Co-authored-by: Max Leske <250711+theseion@users.noreply.github.com>

* minor updates

* update regex assembly

* fix regex update

* added negative tests

* minor fixes

* Update rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf

Co-authored-by: Max Leske <250711+theseion@users.noreply.github.com>

* added POST method tests

---------

Co-authored-by: Max Leske <250711+theseion@users.noreply.github.com>
Assets 2
Loading