Parsing SQL injection messages
mattia conversano <[email protected]>
| Newsgroups | gmane.comp.apache.mod-security.user |
|---|---|
| Message-ID | <b7a05ec5-7783-44d2-b876-e11bddd5bcca@Spark> |
Hi team, Thanks for the tool. I’m new with Modsexurity; my goal is to extract code used for SQLi. I have activated logging with JSON format and i’m trying to extract malicious parameter’s value used to injection using Logstash. But i failed because i don’t find a pattern in audit_data.messages. There is a way to set Modsecurity to parse in a better way logs? Sorry for the inconvenience and thanks for yourk work, Mattia _______________________________________________ mod-security-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/mod-security-users Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: http://www.modsecurity.org/projects/commercial/rules/ http://www.modsecurity.org/projects/commercial/support/