8000 Update word lists regularly · Issue #2621 · coreruleset/coreruleset · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Update word lists regularly #2621

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
31 of 34 tasks
theseion opened this issue Jun 6, 2022 · 2 comments
Closed
31 of 34 tasks

Update word lists regularly #2621

theseion opened this issue Jun 6, 2022 · 2 comments
Labels
🚀 enhancement New feature or request ⚡ list update
Milestone
CRS v4.0.0

Comments

@theseion
Copy link
Contributor
theseion commented Jun 6, 2022 •
edited by dune73
Loading
  1. get an idea from where to take input, add it as comment to the file
  2. manually update the file first
  3. automate 2)
  4. define a cadence for updating

The end goal is to automate as much as possible, so that our word lists don't go stale.

Decision from #2539.

Java-related updates

Scanners/Crawlers

RCE Rules

Windows

PHP

PHP functions rules

These next four are dependent on each other. We need to review all PHP functions and redo the classification in the 4 groups. Documenting the process, the decisions on why some words are in PLX, and maybe converge to something that can be done in an automated way.

SQL Errors

Others

In summary, word list consist of all .data files in the rules/ directory, and the 932XXX files mentioned here.
@theseion theseion added the 🚀 enhancement New feature or request label Jun 6, 2022
@fzipi fzipi added this to the CRS v4.0.0 milestone Jun 18, 2022
@fzipi fzipi mentioned this issue Jul 18, 2022
Closed
@fzipi fzipi mentioned this issue Aug 4, 2022
Closed
2 tasks
@franbuehler franbuehler mentioned this issue Mar 6, 2023
Closed
@dune73
Copy link
Member
dune73 commented Jun 7, 2023

I have added the remark "[POSTPONED AFTER V4]" to #2653 since it deals with java response rules.

@fzipi
Copy link
Member
fzipi commented Feb 13, 2024

Closing this one as completed. I'll create a followup ticket for documenting the next steps.

@fzipi fzipi closed this as completed Feb 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
🚀 enhancement New feature or request ⚡ list update
Projects
None yet
Milestone
CRS v4.0.0
Development

No branches or pull requests
3 participants
@theseion @dune73 @fzipi
0