Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-08 17:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Honor no plaintext password logging for PASS cmd

Browse source
This commit is contained in:
Martin van Hensbergen 2024-09-19 16:55:44 +02:00 • committed by Arne Welzel
parent 989730c241
commit 0e926afbc1
11 changed files with 84 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

12
testing/btest/scripts/base/protocols/ftp/ftp-password-pass-command-hidden.zeek Normal file
View file

@ -0,0 +1,12 @@
# @TEST-DOC: Adding PASS to logged commands should hide the password in password and arg column
# @TEST-EXEC: zeek -b -Cr $TRACES/ftp/ftp-password-pass-command.pcap %INPUT
# @TEST-EXEC: btest-diff conn.log
# @TEST-EXEC: btest-diff ftp.log
# @TEST-EXEC: test ! -f reporter.log
@load base/protocols/conn
@load base/protocols/ftp
redef FTP::logged_commands += { "USER", "PASS", "SYST", "QUIT" };
redef FTP::default_capture_password = F;