airween

SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|!REQUEST_COOKIES:/_pk_ref/|REQUEST_COOKIES_NAMES|ARGS_NAMES|ARGS|XML:/* "@rx (?i:[\"\'][ ]*(([^a-z0-9~_:\' ])|(in)).*?(((l|(\\\\u006C))(o|(\\\\u006F))(c|(\\\\u0063))(a|(\\\\u0061))(t|(\\\\u0074))(i|(\\\\u0069))(o|(\\\\u006F))(n|(\\\\u006E)))|((n|(\\\\u006E))(a|(\\\\u0061))(m|(\\\\u006D))(e|(\\\\u0065)))|((o|(\\\\u006F))(n|(\\\\u006E))(e|(\\\\u0065))(r|(\\\\u0072))(r|(\\\\u0072))(o|(\\\\u006F))(r|(\\\\u0072)))|((v|(\\\\u0076))(a|(\\\\u0061))(l|(\\\\u006C))(u|(\\\\u0075))(e|(\\\\u0065))(O|(\\\\u004F))(f|(\\\\u0066)))).*?=)" \
    "id:941330,\
    phase:2,\
    block,\
    capture,\
    t:none,t:urlDecodeUni,t:htmlEntityDecode,t:compressWhiteSpace,\
    msg:'IE XSS Filters - Attack Detected.',\
    logdata:'Matched Data: %{TX.0} found within %{MATCHED_VAR_NAME}: %{MATCHED_VAR}',\
    tag:'application-multi',\

airween

[
  {
    "enabled":0,
    "version_min":300000,
    "title":"Testing setvar :: OWASP CRS id:941330",
    "client":{
      "ip":"200.249.12.31",
      "port":123
    },
    "server":{

airween

/*
* 
*	gcc -Wall -g -O0 msctest.c -o msctest -lmodsecurity
*	
*/
#include <sys/time.h>

#include "modsecurity/modsecurity.h"
#include "modsecurity/transaction.h"
#include "modsecurity/rules.h"

airween

[
  {
    "enabled":1,
    "version_min":300000,
    "title":"issue 2162 - 1",
    "client":{
      "ip":"200.249.12.31",
      "port":123
    },
    "server":{

airween

###########################
# EUHFC Field day contest #
#     HA2OS  3.08.2014    #
###########################
#
CONTEST=euhfc
LOGFILE=euhfc.log
CONTEST_MODE
RECALL_MULTS
MY_CONTINENT_POINTS=1

airween

[
  {
    "enabled":1,
    "version_min":300000,
    "title":"multipart parser (normal)",
    "client":{
      "ip":"200.249.12.31",
      "port":123
    },
    "server":{

airween

diff --git a/secrules_parser.py b/secrules_parser.py
index 0c1143f..106588b 100644
--- a/secrules_parser.py
+++ b/secrules_parser.py
@@ -94,7 +94,7 @@ def get_rule_id(rule):
 
 def get_rule_regex(rule):
     """ Gets the regex. Only for a given SecAction or SecRule """
-    if rule.__class__.__name__ == "SecRule" or rule.__class__.__name__ == "SecAction":
+    if rule.__class__.__name__ == "SecRule":

airween

#!/usr/bin/python3

import glob
import sys
import os
import secrules_parsing.secrules_parser as secrules_parser
import sre_parse
import sre_constants
import re

airween

#include <stdio.h>
#include <hamlib/rig.h>

int main() {
    RIG * my_rig;
    int retcode;
    vfo_t vfo;

    rig_set_debug(RIG_DEBUG_NONE);

airween

#!/usr/bin/python

import Hamlib

Hamlib.rig_set_debug(Hamlib.RIG_DEBUG_NONE)

class Rig(object):
    def __init__(self):
        self.rig = Hamlib.Rig(Hamlib.RIG_MODEL_NETRIGCTL)
        self.rig.open()