George Boobyer iAugur

This is an example of a custom Fail2Ban filter

It matches SQL injection attempts via the User Agent string

It's not always that easy to drop all of the tables in a db

But here are two great ways:

Use a script to enumerate all of the tables and drop them one by one
Use mysqldump to create a dump with just the schema statements and grep out the drop tables

	<?php
	/**
	* Truncates text.
	*
	* Cuts a string to the length of $length and replaces the last characters
	* with the ending if the text is longer than length.
	*
	* @param string $text String to truncate.
	* @param integer $length Length of returned string, including ellipsis.
	* @param string $ending Ending to be appended to the trimmed string.

	<!DOCTYPE html>
	<html>
	<head>
	<meta name="description" content="[add your bin description]">
	<meta charset="utf-8">
	<meta name="viewport" content="width=device-width">
	<title>Organisation Chart</title>
	</head>
	<body>
	<div id="container"></div>

	Options All -Indexes
	# Ultimate htaccess Blacklist 2 from Perishable Press
	# Deny domain access to spammers and other scumbags
	RewriteEngine on
	RewriteBase /
	RewriteCond %{HTTP_USER_AGENT} ADSARobot\|ah-ha\|almaden\|aktuelles\|Anarchie\|amzn_assoc\|ASPSeek\|ASSORT\|ATHENS\|Atomz\|attach\|attache\|autoemailspider\|BackWeb\|Bandit\|BatchFTP\|bdfetch\|big.brother\|BlackWidow\|bmclient\|Boston\ Project\|BravoBrian\ SpiderEngine\ MarcoPolo\|Bot\ mailto:[email protected]\|Buddy\|Bullseye\|bumblebee\|capture\|CherryPicker\|ChinaClaw\|CICC\|clipping\|Collector\|Copier\|Crescent\|Crescent\ Internet\ ToolPak\|Custo\|cyberalert\|DA$\|Deweb\|diagem\|Digger\|Digimarc\|DIIbot\|DISCo\|DISCo\ Pump\|DISCoFinder\|Download\ Demon\|Download\ Wonder\|Downloader\|Drip\|DSurf15a\|DTS.Agent\|EasyDL\|eCatch\|ecollector\|efp@gmx\.net\|Email\ Extractor\|EirGrabber\|email\|EmailCollector\|EmailSiphon\|EmailWolf\|Express\ WebPictures\|ExtractorPro\|EyeNetIE\|FavOrg\|fastlwspider\|Favorites\ Sweeper\|Fetch\|FEZhead\|FileHound\|FlashGet\ WebWasher\|FlickBot\|fluffy\|FrontPage\|GalaxyBot\|Generic\|Getleft\|GetRight\|

	SetEnvIfNoCase User-Agent "^Mozilla$" BlockedAgent
	SetEnvIfNoCase User-Agent "^Xaldon WebSpider" BlockedAgent
	SetEnvIfNoCase User-Agent "007ac9 Crawler" BlockedAgent
	SetEnvIfNoCase User-Agent "ADSARobot" BlockedAgent
	SetEnvIfNoCase User-Agent "ah-ha" BlockedAgent
	SetEnvIfNoCase User-Agent "AhrefsBot" BlockedAgent
	SetEnvIfNoCase User-Agent "aktuelles" BlockedAgent
	SetEnvIfNoCase User-Agent "almaden" BlockedAgent
	SetEnvIfNoCase User-Agent "amzn_assoc" BlockedAgent
	SetEnvIfNoCase User-Agent "Anarchie" BlockedAgent

	# block if request has header HTTP_USER_AGENTT
	# e.g. Useful to protect against the PHP "zerodium" backdoor
	# https://thehackernews.com/2021/03/phps-git-server-hacked-to-insert-secret.html
	<IfModule mod_rewrite.c>
	RewriteEngine On
	RewriteCond %{HTTP:HTTP_USER_AGENTT} !^$
	RewriteRule ^ - [F]
	</IfModule>

	# Another approach would be to always unset the header from the request

	# Steps for adding an existing project to a remote git repo service
	# Create a repor on a service such as Bitbucket / Github / Gitlab etc
	# The we want to add an existing project we have locally to that repo
	#
	# The steps involved are:
	# 1) Intialise a local repo in the folder with the files to be committed
	# 2) Create a gitignore file (ensure we don't commit sensitive files)
	# 3) Add the files to be committed (ensure we have a gitignore so we don't commit sensitve files)
	# 4) Set the remote origin to our service repo (bitbucket/Github etc)
	# 5) Push the files to the remote

	#!/bin/bash
	#
	# Configure permissions on a WordPress site. Lock files or open them for plugin/theme updates. This script configures WordPress file permissions based on recommendations
	# from http://codex.wordpress.org/Hardening_WordPress#File_permissions
	# USAGE: ./script.sh /path/to/wordpress/directory wp_content_folder_name close_or_open
	# 👆this script name👆 👆wordpress directory👆 👆wp-content folder name👆 👆"open" only for updates then "close"👆
	#
	# EXAMPLE : ./script.sh /var/www/html wp-content close __OR__ ./script.sh /var/www/html wp-content open
	#
	# Pass open as the third variable only when you wish to update plugins/themes, run the same script again with close as third variable to set secure permissions


	# Steps for renaming your master branch to 'main'
	# Adapted from
	# https://dev.to/rhymu8354/git-renaming-the-master-branch-137b
	# https://www.hanselman.com/blog/EasilyRenameYourGitDefaultBranchFromMasterToMain.aspx

	#---------------------------------------------------------------------------------------------#
	# A) - Steps if you have no remote / upstream
	# B) - Steps if you are the repo owner and have a remote / upstream
	# C) - Steps if you are using a repo where the upstream main branch has been renamed