Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 22:58:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

btest: Add detect-sqli test script

Browse source 
...I added the baselines during the merge, just not the test itself.
This commit is contained in:
Arne Welzel 2024-11-04 18:42:52 +01:00
parent 8935dc9ed4
commit b69222d5f6
1 changed files with 13 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

13
testing/btest/scripts/policy/protocols/http/sql-injection-plus-dvwa.zeek Normal file
View file

@ -0,0 +1,13 @@
# @TEST-EXEC: zeek -C -r $TRACES/http/cooper-grill-dvwa.pcapng -b %INPUT >output
# @TEST-EXEC: btest-diff output
# @TEST-EXEC: zeek-cut -m uid method host uri tags < http.log > http.log.cut
# @TEST-EXEC: btest-diff http.log.cut
@load base/protocols/http
@load protocols/http/detect-sqli
event connection_state_remove(c: connection)
{
if ( c?$http )
print c$uid, c$id, cat(c$http$tags);
}