diff options
| author | jvoisin | 2017-10-11 11:40:02 +0200 |
|---|---|---|
| committer | jvoisin | 2017-10-11 11:40:02 +0200 |
| commit | e44b3b6b6ab1af61f9abc210546700e30aeff19c (patch) | |
| tree | 408b7b079fc719ba686673e88daca939e0573565 /config/default.ini | |
| parent | 0e9086030f36f13a4007ae9e111fdcfbc40edbb1 (diff) | |
s/disable_functions/disable_function/g
This should close #36 and #30
Diffstat (limited to 'config/default.ini')
| -rw-r--r-- | config/default.ini | 74 |
1 files changed, 37 insertions, 37 deletions
diff --git a/config/default.ini b/config/default.ini index 0f67632..88398c1 100644 --- a/config/default.ini +++ b/config/default.ini | |||
| @@ -1,54 +1,54 @@ | |||
| 1 | # Harden the `chmod` function | 1 | # Harden the `chmod` function |
| 2 | sp.disable_functions.function("chmod").param("mode").value_r("^[0-9]{2}[67]$").drop(); | 2 | sp.disable_function.function("chmod").param("mode").value_r("^[0-9]{2}[67]$").drop(); |
| 3 | sp.disable_functions.function("chmod").param("mode").value_r("o\\+w$").drop(); | 3 | sp.disable_function.function("chmod").param("mode").value_r("o\\+w$").drop(); |
| 4 | 4 | ||
| 5 | # Prevent various `mail`-related vulnerabilities | 5 | # Prevent various `mail`-related vulnerabilities |
| 6 | sp.disable_functions.function("mail").param("additional_parameters").value_r("\\-").drop(); | 6 | sp.disable_function.function("mail").param("additional_parameters").value_r("\\-").drop(); |
| 7 | 7 | ||
| 8 | ##Prevent various `include`-related vulnerabilities | 8 | ##Prevent various `include`-related vulnerabilities |
| 9 | sp.disable_functions.function_r("^(?:require|include)_once$").value_r("\\.(?:php|php7|inc|tpl)$").allow(); | 9 | sp.disable_function.function_r("^(?:require|include)_once$").value_r("\\.(?:php|php7|inc|tpl)$").allow(); |
| 10 | sp.disable_functions.function_r("^require|include$").value_r("\\.(?:php|php7|inc|tpl)$").allow(); | 10 | sp.disable_function.function_r("^require|include$").value_r("\\.(?:php|php7|inc|tpl)$").allow(); |
| 11 | sp.disable_functions.function_r("^(?:require|include)_once$").drop(); | 11 | sp.disable_function.function_r("^(?:require|include)_once$").drop(); |
| 12 | sp.disable_functions.function_r("^require|include$").drop(); | 12 | sp.disable_function.function_r("^require|include$").drop(); |
| 13 | 13 | ||
| 14 | # Prevent `system`-related injections | 14 | # Prevent `system`-related injections |
| 15 | sp.disable_functions.function("system").param("command").value_r("[$|;&`\\n]").drop(); | 15 | sp.disable_function.function("system").param("command").value_r("[$|;&`\\n]").drop(); |
| 16 | sp.disable_functions.function("shell_exec").param("command").value_r("[$|;&`\\n]").drop(); | 16 | sp.disable_function.function("shell_exec").param("command").value_r("[$|;&`\\n]").drop(); |
| 17 | sp.disable_functions.function("exec").param("command").value_r("[$|;&`\\n]").drop(); | 17 | sp.disable_function.function("exec").param("command").value_r("[$|;&`\\n]").drop(); |
| 18 | sp.disable_functions.function("proc_open").param("command").value_r("[$|;&`\\n]").drop(); | 18 | sp.disable_function.function("proc_open").param("command").value_r("[$|;&`\\n]").drop(); |
| 19 | 19 | ||
| 20 | # Prevent runtime modification of interesting things | 20 | # Prevent runtime modification of interesting things |
| 21 | sp.disable_functions.function("ini_set").param("var_name").value("assert.active").drop(); | 21 | sp.disable_function.function("ini_set").param("var_name").value("assert.active").drop(); |
| 22 | sp.disable_functions.function("ini_set").param("var_name").value("zend.assertions").drop(); | 22 | sp.disable_function.function("ini_set").param("var_name").value("zend.assertions").drop(); |
| 23 | sp.disable_functions.function("ini_set").param("var_name").value("memory_limit").drop(); | 23 | sp.disable_function.function("ini_set").param("var_name").value("memory_limit").drop(); |
| 24 | sp.disable_functions.function("ini_set").param("var_name").value("include_path").drop(); | 24 | sp.disable_function.function("ini_set").param("var_name").value("include_path").drop(); |
| 25 | sp.disable_functions.function("ini_set").param("var_name").value("open_basedir").drop(); | 25 | sp.disable_function.function("ini_set").param("var_name").value("open_basedir").drop(); |
| 26 | 26 | ||
| 27 | # Detect some backdoors via environnement recon | 27 | # Detect some backdoors via environnement recon |
| 28 | sp.disable_functions.function("ini_get").param("var_name").value_r("(?:allow_url_fopen|open_basedir|suhosin)").drop(); | 28 | sp.disable_function.function("ini_get").param("var_name").value_r("(?:allow_url_fopen|open_basedir|suhosin)").drop(); |
| 29 | sp.disable_functions.function("function_exists").param("function_name").value_r("(?:eval|exec|system)").drop(); | 29 | sp.disable_function.function("function_exists").param("function_name").value_r("(?:eval|exec|system)").drop(); |
| 30 | sp.disable_functions.function("is_callable").param("var").value_r("(?:eval|exec|system)").drop(); | 30 | sp.disable_function.function("is_callable").param("var").value_r("(?:eval|exec|system)").drop(); |
| 31 | 31 | ||
| 32 | # Ghetto sqli hardening | 32 | # Ghetto sqli hardening |
| 33 | sp.disable_functions.function_r("mysqli?_query").param("query").value_r("/\\*").drop(); | 33 | sp.disable_function.function_r("mysqli?_query").param("query").value_r("/\\*").drop(); |
| 34 | sp.disable_functions.function_r("mysqli?_query").param("query").value_r("--").drop(); | 34 | sp.disable_function.function_r("mysqli?_query").param("query").value_r("--").drop(); |
| 35 | sp.disable_functions.function_r("mysqli?_query").param("query").value_r("#").drop(); | 35 | sp.disable_function.function_r("mysqli?_query").param("query").value_r("#").drop(); |
| 36 | sp.disable_functions.function_r("mysqli?_query").param("query").value_r(";.*;").drop(); | 36 | sp.disable_function.function_r("mysqli?_query").param("query").value_r(";.*;").drop(); |
| 37 | sp.disable_functions.function_r("mysqli?_query").param("query").value_r("benchmark").drop(); | 37 | sp.disable_function.function_r("mysqli?_query").param("query").value_r("benchmark").drop(); |
| 38 | sp.disable_functions.function_r("mysqli?_query").param("query").value_r("sleep").drop(); | 38 | sp.disable_function.function_r("mysqli?_query").param("query").value_r("sleep").drop(); |
| 39 | sp.disable_functions.function_r("mysqli?_query").param("query").value_r("information_schema").drop(); | 39 | sp.disable_function.function_r("mysqli?_query").param("query").value_r("information_schema").drop(); |
| 40 | sp.disable_functions.function("PDO::query").param("query").value_r("/\\*").drop(); | 40 | sp.disable_function.function("PDO::query").param("query").value_r("/\\*").drop(); |
| 41 | sp.disable_functions.function("PDO::query").param("query").value_r("--").drop(); | 41 | sp.disable_function.function("PDO::query").param("query").value_r("--").drop(); |
| 42 | sp.disable_functions.function("PDO::query").param("query").value_r("#").drop(); | 42 | sp.disable_function.function("PDO::query").param("query").value_r("#").drop(); |
| 43 | sp.disable_functions.function("PDO::query").param("query").value_r(";.*;").drop(); | 43 | sp.disable_function.function("PDO::query").param("query").value_r(";.*;").drop(); |
| 44 | sp.disable_functions.function("PDO::query").param("query").value_r("benchmark\\s*\\(").drop(); | 44 | sp.disable_function.function("PDO::query").param("query").value_r("benchmark\\s*\\(").drop(); |
| 45 | sp.disable_functions.function("PDO::query").param("query").value_r("sleep\\s*\\(").drop(); | 45 | sp.disable_function.function("PDO::query").param("query").value_r("sleep\\s*\\(").drop(); |
| 46 | sp.disable_functions.function("PDO::query").param("query").value_r("information_schema").drop(); | 46 | sp.disable_function.function("PDO::query").param("query").value_r("information_schema").drop(); |
| 47 | 47 | ||
| 48 | # Ghetto sqli detection | 48 | # Ghetto sqli detection |
| 49 | sp.disable_functions.function_r("mysqli?_query").ret("FALSE").drop(); | 49 | sp.disable_function.function_r("mysqli?_query").ret("FALSE").drop(); |
| 50 | sp.disable_functions.function_r("PDO::query").ret("FALSE").drop(); | 50 | sp.disable_function.function_r("PDO::query").ret("FALSE").drop(); |
| 51 | 51 | ||
| 52 | #File upload | 52 | #File upload |
| 53 | sp.disable_functions.function("move_uploaded_file").param("destination").value_r("\\.ph").drop(); | 53 | sp.disable_function.function("move_uploaded_file").param("destination").value_r("\\.ph").drop(); |
| 54 | sp.disable_functions.function("move_uploaded_file").param("destination").value_r("\\.ht").drop(); | 54 | sp.disable_function.function("move_uploaded_file").param("destination").value_r("\\.ht").drop(); |
