Gecko [ www.finalhopeacademy.com ]

Name	Size	Permission
00_Init_Initialization.conf	3.27 KB	-rw-r--r--
01_Init_AppsInitialization.con...	1.84 KB	-rw-r--r--
02_Global_Generic.conf	23.78 KB	-rw-r--r--
03_Global_Agents.conf	5.15 KB	-rw-r--r--
04_Global_Domains.conf	3.3 KB	-rw-r--r--
05_Global_Incoming.conf	1.42 KB	-rw-r--r--
06_Global_Backdoor.conf	2.2 KB	-rw-r--r--
07_XSS_XSS.conf	36.21 KB	-rw-r--r--
08_Global_Other.conf	7.44 KB	-rw-r--r--
09_Bruteforce_Bruteforce.conf	5.98 KB	-rw-r--r--
10_HTTP_HTTP.conf	4.11 KB	-rw-r--r--
11_HTTP_HTTPDoS.conf	3.95 KB	-rw-r--r--
12_HTTP_Protocol.conf	12.1 KB	-rw-r--r--
13_HTTP_Request.conf	2.42 KB	-rw-r--r--
14_Outgoing_FilterGen.conf	5.35 KB	-rw-r--r--
15_Outgoing_FilterASP.conf	1.75 KB	-rw-r--r--
16_Outgoing_FilterPHP.conf	2.54 KB	-rw-r--r--
17_Outgoing_FilterSQL.conf	11.83 KB	-rw-r--r--
18_Outgoing_FilterOther.conf	3.57 KB	-rw-r--r--
19_Outgoing_FilterInFrame.conf	1.86 KB	-rw-r--r--
20_Outgoing_FiltersEnd.conf	2.49 KB	-rw-r--r--
21_PHP_PHPGen.conf	1.59 KB	-rw-r--r--
22_SQL_SQLi.conf	13.72 KB	-rw-r--r--
23_ROR_RORGen.conf	2.97 KB	-rw-r--r--
24_Apps_Joomla.conf	7.85 KB	-rw-r--r--
25_Apps_JComponent.conf	42.66 KB	-rw-r--r--
26_Apps_WordPress.conf	10.96 KB	-rw-r--r--
27_Apps_WPPlugin.conf	414.97 KB	-rw-r--r--
28_Apps_WHMCS.conf	967 B	-rw-r--r--
29_Apps_Drupal.conf	83.09 KB	-rw-r--r--
30_Apps_OtherApps.conf	484.08 KB	-rw-r--r--
LICENSE.txt	11.09 KB	-rw-r--r--
bl_IPs	0 B	-rw-r--r--
bl_URLs	714 B	-rw-r--r--
bl_agents	1.92 KB	-rw-r--r--
bl_domains	134.24 KB	-rw-r--r--
bl_input	3.84 KB	-rw-r--r--
bl_os_files	29.46 KB	-rw-r--r--
bl_output	2.17 KB	-rw-r--r--
bl_output_java	240 B	-rw-r--r--
bl_output_php	8.88 KB	-rw-r--r--
bl_output_sql	1.77 KB	-rw-r--r--
bl_php_functions	589 B	-rw-r--r--
bl_scanners	539 B	-rw-r--r--
bl_scanners_headers	216 B	-rw-r--r--
bl_scanners_urls	418 B	-rw-r--r--
categories.conf	262.29 KB	-rw-r--r--
cwatch_managed_domains	0 B	-rw-r--r--
cwatch_protected_domains	0 B	-rw-r--r--
rules.conf.main	975 B	-rw-r--r--
rules.dat	5 B	-rw-r--r--
userdata_bl_IPs	50 B	-rw-r--r--
userdata_bl_URLs	109 B	-rw-r--r--
userdata_bl_agents	37 B	-rw-r--r--
userdata_bl_cookies	34 B	-rw-r--r--
userdata_bl_domains	34 B	-rw-r--r--
userdata_bl_extensions	375 B	-rw-r--r--
userdata_bl_headers	98 B	-rw-r--r--
userdata_bl_referers	35 B	-rw-r--r--
userdata_login_pages	149 B	-rw-r--r--
userdata_wl_IPs	125 B	-rw-r--r--
userdata_wl_URLs	48 B	-rw-r--r--
userdata_wl_agents	37 B	-rw-r--r--
userdata_wl_content_type	193 B	-rw-r--r--
userdata_wl_domains	34 B	-rw-r--r--
userdata_wl_extensions	54 B	-rw-r--r--
userdata_wl_methods	30 B	-rw-r--r--

Name

Size

Permission

Action

00_Init_Initialization.conf

3.27 KB

-rw-r--r--

01_Init_AppsInitialization.con...

1.84 KB

-rw-r--r--

02_Global_Generic.conf

23.78 KB

-rw-r--r--

03_Global_Agents.conf

5.15 KB

-rw-r--r--

04_Global_Domains.conf

3.3 KB

-rw-r--r--

05_Global_Incoming.conf

1.42 KB

-rw-r--r--

06_Global_Backdoor.conf

2.2 KB

-rw-r--r--

07_XSS_XSS.conf

36.21 KB

-rw-r--r--

08_Global_Other.conf

7.44 KB

-rw-r--r--

09_Bruteforce_Bruteforce.conf

5.98 KB

-rw-r--r--

10_HTTP_HTTP.conf

4.11 KB

-rw-r--r--

11_HTTP_HTTPDoS.conf

3.95 KB

-rw-r--r--

12_HTTP_Protocol.conf

12.1 KB

-rw-r--r--

13_HTTP_Request.conf

2.42 KB

-rw-r--r--

14_Outgoing_FilterGen.conf

5.35 KB

-rw-r--r--

15_Outgoing_FilterASP.conf

1.75 KB

-rw-r--r--

16_Outgoing_FilterPHP.conf

2.54 KB

-rw-r--r--

17_Outgoing_FilterSQL.conf

11.83 KB

-rw-r--r--

18_Outgoing_FilterOther.conf

3.57 KB

-rw-r--r--

19_Outgoing_FilterInFrame.conf

1.86 KB

-rw-r--r--

20_Outgoing_FiltersEnd.conf

2.49 KB

-rw-r--r--

21_PHP_PHPGen.conf

1.59 KB

-rw-r--r--

22_SQL_SQLi.conf

13.72 KB

-rw-r--r--

23_ROR_RORGen.conf

2.97 KB

-rw-r--r--

24_Apps_Joomla.conf

7.85 KB

-rw-r--r--

25_Apps_JComponent.conf

42.66 KB

-rw-r--r--

26_Apps_WordPress.conf

10.96 KB

-rw-r--r--

27_Apps_WPPlugin.conf

414.97 KB

-rw-r--r--

28_Apps_WHMCS.conf

967 B

-rw-r--r--

29_Apps_Drupal.conf

83.09 KB

-rw-r--r--

30_Apps_OtherApps.conf

484.08 KB

-rw-r--r--

LICENSE.txt

11.09 KB

-rw-r--r--

bl_IPs

0 B

-rw-r--r--

bl_URLs

714 B

-rw-r--r--

bl_agents

1.92 KB

-rw-r--r--

bl_domains

134.24 KB

-rw-r--r--

bl_input

3.84 KB

-rw-r--r--

bl_os_files

29.46 KB

-rw-r--r--

bl_output

2.17 KB

-rw-r--r--

bl_output_java

240 B

-rw-r--r--

bl_output_php

8.88 KB

-rw-r--r--

bl_output_sql

1.77 KB

-rw-r--r--

bl_php_functions

589 B

-rw-r--r--

bl_scanners

539 B

-rw-r--r--

bl_scanners_headers

216 B

-rw-r--r--

bl_scanners_urls

418 B

-rw-r--r--

categories.conf

262.29 KB

-rw-r--r--

cwatch_managed_domains

0 B

-rw-r--r--

cwatch_protected_domains

0 B

-rw-r--r--

rules.conf.main

975 B

-rw-r--r--

rules.dat

5 B

-rw-r--r--

userdata_bl_IPs

50 B

-rw-r--r--

userdata_bl_URLs

109 B

-rw-r--r--

userdata_bl_agents

37 B

-rw-r--r--

userdata_bl_cookies

34 B

-rw-r--r--

userdata_bl_domains

34 B

-rw-r--r--

userdata_bl_extensions

375 B

-rw-r--r--

userdata_bl_headers

98 B

-rw-r--r--

userdata_bl_referers

35 B

-rw-r--r--

userdata_login_pages

149 B

-rw-r--r--

userdata_wl_IPs

125 B

-rw-r--r--

userdata_wl_URLs

48 B

-rw-r--r--

userdata_wl_agents

37 B

-rw-r--r--

userdata_wl_content_type

193 B

-rw-r--r--

userdata_wl_domains

34 B

-rw-r--r--

userdata_wl_extensions

54 B

-rw-r--r--

userdata_wl_methods

30 B

-rw-r--r--

Code Editor : 00_Init_Initialization.conf

# ---------------------------------------------------------------
# Comodo ModSecurity Rules
# Copyright (C) 2022 Comodo Security solutions All rights reserved.
#
# The COMODO SECURITY SOLUTIONS Mod Security Rule Set is distributed under
# THE COMODO SECURITY SOLUTIONS END USER LICENSE AGREEMENT,
# Please see the enclosed LICENCE file for full details.
# ---------------------------------------------------------------
# This is a FILE CONTAINING CHANGED or MODIFIED RULES FROM THE:
# OWASP ModSecurity Core Rule Set (CRS)
# ---------------------------------------------------------------

SecComponentSignature "CWAF_Apache"
SecResponseBodyAccess Off
SecDefaultAction \
	"phase:1,deny,log"

SecDefaultAction \
	"phase:2,deny,status:403,log,auditlog"

SecAction \
	"id:210000,phase:1,pass,setvar:'tx.max_num_args=100000',nolog,t:none"

SecRule &TX:domain "@eq 0" \
	"id:210002,phase:1,pass,setvar:'tx.domain=%{REQUEST_HEADERS.Host}',nolog,t:none,rev:7,severity:2,tag:'CWAF',tag:'Initialization'"

SecRule TX:domain "@pmf cwatch_managed_domains" \
	"id:210005,phase:1,pass,setvar:'tx.mode=M',nolog,t:none,t:lowercase,skip:2,rev:7,severity:2,tag:'CWAF',tag:'Initialization'"

SecRule TX:domain "@pmf cwatch_protected_domains" \
	"id:210006,phase:1,pass,setvar:'tx.mode=P',nolog,t:none,t:lowercase,skip:1,rev:7,severity:2,tag:'CWAF',tag:'Initialization'"

SecAction \
	"id:210003,phase:1,pass,setvar:'tx.mode=F',nolog"

SecAction \
	"id:210010,phase:1,pass,setvar:'tx.points_limit4=5',setvar:'tx.points_limit3=4',setvar:'tx.points_limit2=3',setvar:'tx.points_limit1=2',setvar:'tx.points=0',setvar:'tx.sqli_points=0',setvar:'tx.xss_points=0',setvar:'tx.incoming_points=0',setvar:'tx.outgoing_points=0',nolog,t:none"

SecAction \
	"id:210020,phase:1,pass,setvar:'tx.incoming_points_limit=5',setvar:'tx.outgoing_points_limit=4',setvar:'tx.points_blocking=off',setvar:'tx.process_response=off',nolog,t:none"

SecAction \
	"id:210030,phase:1,pass,setvar:'tx.brute_force_burst_time_slice=60',setvar:'tx.brute_force_counter_threshold=10',setvar:'tx.brute_force_block_timeout=300',nolog,t:none"

SecRule REQUEST_HEADERS:Content-Type "text/xml" \
	"id:210050,chain,phase:1,pass,nolog,t:none,t:lowercase,rev:1,severity:2,tag:'CWAF',tag:'Initialization'"
SecRule REQBODY_PROCESSOR "!@streq XML" \
	"ctl:requestBodyProcessor=XML"

SecRule REQUEST_HEADERS:User-Agent "^(.{0,})$" \
	"id:210060,phase:1,pass,setvar:'tx.ua_hash=%{matched_var}',nolog,t:none,t:sha1,t:hexEncode,rev:1,severity:2,tag:'CWAF',tag:'Initialization'"

SecRule REQUEST_HEADERS:x-forwarded-for "^\b([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})\b" \
	"id:210070,phase:1,capture,pass,setvar:'tx.real_ip=%{tx.1}',nolog,t:none,rev:1,severity:2,tag:'CWAF',tag:'Initialization'"

SecRule &TX:REAL_IP "@eq 0" \
	"id:210090,chain,phase:1,pass,nolog,t:none,rev:8,severity:2,tag:'CWAF',tag:'Initialization'"
SecRule REMOTE_ADDR "@rx \b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\b" \
	"capture,setvar:'tx.real_ip=%{tx.0}',t:none"

SecRule &TX:REAL_IP "!@eq 0" \
	"id:210080,phase:1,pass,initcol:global=global,initcol:ip=%{tx.real_ip}_%{tx.ua_hash},nolog,t:none,rev:2,severity:2,tag:'CWAF',tag:'Initialization'"

SecAction \
	"id:209030,phase:1,pass,setvar:'tx.brute_force_counter_threshold=6000',setvar:'tx.brute_force_block_timeoutand=300',setvar:'tx.brute_force_burst_time_slice=60',nolog,t:none"

${this.title}

Code Editor : 00_Init_Initialization.conf