Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Remove deprecations tagged for v8.1

Browse source
This commit is contained in:
Tim Wojtulewicz 2025-08-04 15:41:23 -07:00
parent e4dab3dded
commit d95affde4d
108 changed files with 113 additions and 2230 deletions
Download patch file Download diff file Expand all files Collapse all files

4
testing/btest/scripts/policy/protocols/http/test-sql-injection-regex.zeek
View file

@ -1,7 +1,7 @@
# @TEST-EXEC: zeek -b %INPUT > output
# @TEST-EXEC: btest-diff output
@load protocols/http/detect-sqli
@load protocols/http/detect-sql-injection
event zeek_init()
{
@ -14,7 +14,6 @@ event zeek_init()
add positive_matches["/index.asp?ID='+139+'0"];
add positive_matches["/index.php?blah=123'/*blooblah*/;select * from something;--"];
add positive_matches["/index.cfm?ID=3%' and '%'='"];
add positive_matches["/index.php?mac=\" OR whatever LIKE \"%"];
add positive_matches["/index.cfm?ID=3;declare @d int;--"];
add positive_matches["/index.cfm?subjID=12;create table t_jiaozhu(jiaozhu varchar(200))"];
add positive_matches["/index.cfm?subjID=12%' and(char(94)+user+char(94))>0 and '%'='"];
@ -96,6 +95,7 @@ event zeek_init()
add negative_matches["/A-B-C-D/inc/foobar.php?img=1179681280a b c d arf union.jpg"];
# These are still being matched accidentally.
#add positive_matches["/index.php?mac=\" OR whatever LIKE \"%"];
#add negative_matches["/api/datasources/proxy/1/query?db=telegraf&q=SELECT mean(\"0.5\") AS \"0.5\", mean(\"0.9\") AS \"0.9\", mean(\"0.99\") AS \"0.99\" FROM \"boomd_indexer_write_size_bytes\" WHERE (\"type\" = 'key' AND \"space\" =~ /^(corelight|wrccdc)$/) AND time >= 1561410802000ms and time <= 1561416568000ms GROUP BY time(1s);SELECT derivative(sum(\"sum\"), 1s) FROM \"boomd_indexer_write_size_bytes\" WHERE (\"type\" = 'key' AND \"space\" =~ /^(corelight|wrccdc)$/) AND time >= 1561410802000ms and time <= 1561416568000ms GROUP BY time(1s)&epoch=ms"];
#add negative_matches["/test,+soviet+union&searchscope=7&SORT=DZ/test,+soviet+union&foobar=7"];
#add negative_matches["/search?hl=en&q=fee union western"];