xXx

Hexid M1n1 5h3ll MobiLe

proc/self/root/backup/ebm/home/apache/conf/_[ Not.Writable ]

File://proc/self/root/backup/ebm/home/apache/conf/mod_security.conf

LoadModule security2_module     modules/mod_security2.so

<IfModule mod_security2.c>
    # Add XSS defense Rule 2008/06/10
    # Add Zeroboard Vul defense Rule.  2008/07/31
    # Improve Zeroboard remote_addr Vul. defense Rule  2008/10/06
    # Improve technote Vul. defense Rule  2008/10/06
    # Add technote php injection Vul. defense Rule  2008/10/06
    # Add gnuboard 3.x formmailsend.php spam defense Rule  2008/10/08
    # Add kboard php injection Vul. defense Rule 2008/10/30
    # Add mass sql injection Vul. defense Rule 2008/12/22
    # Modify rules for mod_security2 2009/06/25
    # Zeroboard Vulnerability Deny 2010.12.19
    # PHP SESSION Vulnerability Deny 2010.12.20
    # Gnuboard Sql Injection Vulnerability Defense 2011.08.23

    # v1.9 SecFilterEngine
    SecRuleEngine On

    # Reject requests with status 406
    # v1.9 SecFilterDefaultAction
    SecDefaultAction "deny,log,status:406,phase:2"
    #SecDefaultAction "pass,log"

    # Some sane defaults
    SecRequestBodyAccess On  
    #SecFilterCheckURLEncoding On

    # Only record the interesting stuff
    #SecAuditEngine On
    SecAuditEngine RelevantOnly
    SecAuditLog logs/mod_sec2_audit.log

    ## Customized Filters ##
    # system command
    SecRule ARGS "/etc/passwd|wget|system\("

    # zeroboard, phpbb
    # v1.9 SecFilterSelective ARG_dir
    SecRule ARGS:dir "http:/|ftp:/"
    SecRule ARGS:_zb_path "http:/|ftp:/"
    SecRule ARGS:remote_addr "eval"
    SecRule REQUEST_FILENAME "lib\.php$" chain
    SecRule ARGS "remote_addr"

    # technote
    SecRule REQUEST_FILENAME ".*\.cgi" chain
    SecRule ARGS:filename ".*\|"

    SecRule REQUEST_URI "skin_shop/standard" chain
    SecRule ARGS:shop_this_skin_path "http:/|ftp:/"

    SecRule FILES_NAMES "\.htaccess"

    # rgboard php injection
    SecRule REQUEST_URI "rgboard/.*site_path=(http:/|ftp:/)"

    # gnuboard formmail spam
    SecRule "REQUEST_HEADERS:x-forwarded-for|REQUEST_HEADERS:via" "!^$" chain
    SecRule REQUEST_HEADERS:referer "doc=bbs/formmailsend.php|m_mailer_ok.php"

    # kboard php injection
    SecRule REQUEST_URI "/kboard.php\?board=" chain
    SecRule ARGS:act "http:/|ftp:/"

    # phpmyadmin
    SecRule REQUEST_URI "mosConfig_absolute_path=(http:/|ftp:/)"

    # mass sql injection
    SecRule REQUEST_HEADERS:Accept-Language "^$" chain
    SecRule REQUEST_HEADERS:User-Agent "^Mozilla\/4\.0 \(compatible; MSIE 6\.0; Windows NT 5\.0\)"

    # Directory traversal
    #SecRule ARGS "(\.\./){4,}"

    #SecRule "REQUEST_HEADERS:User-Agent|REQUEST_HEADERS:Host" "^$"

    # XSS Attack Defense
    #SecRule ARGS "alert[[:space:]]*\("
    #SecRule ARGS "&#[[0-9a-fA-F]]{2}"
    #SecRule ARGS "onKeyUp"
    #SecRule ARGS "\x5cx[0-9a-fA-F]{2}"
    #SecRule ARGS "fromCharCode"
    #SecRule ARGS "vbscript:"
    #SecRule ARGS "expression[[:space:]]*\("
    #SecRule ARGS "document\.body"
    #SecRule ARGS "document\.cookie"
    #SecRule ARGS "document\.location"
    #SecRule ARGS "document\.write"
    #SecRule REQUEST_URI "eval[[:space:]]*\("

    # WebShell execute Defense
    SecRule REQUEST_URI "images.php|gifimg.php" chain
    SecRule REQUEST_METHOD "POST"

    # Block php injection
    SecRule REQUEST_URI "\.txt\?+$"

    # Zeroboard webshell Deny 2010.12.19
    SecRule REQUEST_URI "/icon/visitLog.php"

    # PHP SESSION Vulnerability Deny 2010.12.20
    SecRule ARGS_NAMES "^(HTTP_SESSION_VARS\[.+\]|_SESSION\[.+\])$"
    SecRule REQUEST_COOKIES_NAMES "^(HTTP_SESSION_VARS\[.+\]|_SESSION\[.+\])$"

    # Gnuboard Sql Injection Vulnerability Defense 2011.08.23
    SecRule REQUEST_URI ".*setup\.php.*" chain
    SecRule ARGS:configuration ".*(system\(\\$_get|eval\(\\$_get)"
</IfModule>

Your Access Expired	Date. in : 29-08-2025
Regist : 09-12-2024	Expired : 01-12-2027