Na}{

File Content: `scanners-user-agents.data`

# This file lists what we think the most widely used
# security scanners identifyable via their user agents.
#
# The list is curated by hand. Attempts to machine-generate
# a larger list leads to a lot of false positives and edge
# cases where certain scanners / bots are welcome in certain
# situations. We consider this a baseline of unwanted scanners.


# http://www.arachni-scanner.com/
arachni

betabot

bewica-security-scan

# Backup File Artifacts Checker
# https://github.com/mazen160/bfac
BFAC

# Commix
# https://github.com/commixproject/commix
commix

# Detectify website vulnerability scanner
# https://detectify.com/
Detectify

# hidden page scanner
# (deprecated) https://www.owasp.org/index.php/Category:OWASP_DirBuster_Project
dirbuster

fimap

# vuln scanner
# https://github.com/ffuf/ffuf
fuzz faster

# Scanner that looks for existing or hidden web objects
# https://github.com/OJ/gobuster
gobuster

# sql injection
havij

hexometer

jbrofuzz

jorgee

libwhisker

# port scanner
# https://github.com/robertdavidgraham/masscan
masscan

morfeus

# The Mysterious Mozlila User Agent bot
# https://trunc.org/learning/the-mozlila-user-agent-bot
Mozlila

# Nessus
# http://www.tenable.com/products/nessus-vulnerability-scanner
nessus

netlab360

netsparker

# vuln scanner
# https://cirt.net/Nikto2
nikto

nmap

# https://github.com/projectdiscovery/nuclei
nuclei

# http://www.openvas.org/
openvas

sitelockspider

# SQL Injections
# http://sqlmap.org/
sqlmap

# https://www.cyber.nj.gov/threat-profiles/trojan-variants/sysscan
sysscan

# https://github.com/google/tsunami-security-scanner
TsunamiSecurityScanner

w3af.org

# http://www.robotstxt.org/db/webbandit.html
webbandit

# (deprecated) http://www.scrt.ch/en/attack/downloads/webshag
webshag

# https://github.com/xmendez/wfuzz
wfuzz

whatweb

wprecon

# wordpress vuln scanner
# https://wpscan.org/
wpscan

# ZGrab scanner (Mozilla/5.0 zgrab/0.x)
# https://zmap.io
zgrab

zmeu

Name	Size	Permission
10_modsecurity_crs_10_config.conf	37009 bytes	0644
999_dreamhost_request_limits.conf	5308 bytes	0644
99_dreamhost_rules.conf	14332 bytes	0644
99_modsec-crs-setup.conf	32757 bytes	0644
REQUEST-00-LOCAL-WHITELIST.conf	9043 bytes	0644
REQUEST-901-INITIALIZATION.conf	14718 bytes	0644
REQUEST-903.9001-DRUPAL-EXCLUSION-RULES.conf	13555 bytes	0644
REQUEST-903.9002-WORDPRESS-EXCLUSION-RULES.conf	25812 bytes	0644
REQUEST-903.9003-NEXTCLOUD-EXCLUSION-RULES.conf	10642 bytes	0644
REQUEST-903.9004-DOKUWIKI-EXCLUSION-RULES.conf	7822 bytes	0644
REQUEST-905-COMMON-EXCEPTIONS.conf	1649 bytes	0644
REQUEST-911-METHOD-ENFORCEMENT.conf	2982 bytes	0644
REQUEST-913-SCANNER-DETECTION.conf	3622 bytes	0644
REQUEST-920-PROTOCOL-ENFORCEMENT.conf	64491 bytes	0644
REQUEST-921-PROTOCOL-ATTACK.conf	21029 bytes	0644
REQUEST-930-APPLICATION-ATTACK-LFI.conf	8134 bytes	0644
REQUEST-931-APPLICATION-ATTACK-RFI.conf	8932 bytes	0644
REQUEST-933-APPLICATION-ATTACK-PHP.conf	32894 bytes	0644
REQUEST-934-APPLICATION-ATTACK-NODEJS.conf	3927 bytes	0644
REQUEST-942-APPLICATION-ATTACK-SQLI.conf	96560 bytes	0644
REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf	5628 bytes	0644
REQUEST-944-APPLICATION-ATTACK-JAVA.conf	22516 bytes	0644
REQUEST-949-BLOCKING-EVALUATION.conf	8176 bytes	0644
RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf	4122 bytes	0644
WPtoolUA.data	318 bytes	0644
cachefly.ips.data	166 bytes	0644
crawlers-user-agents.data	786 bytes	0644
dh_whitelist_ip.data	0 bytes	0644
fastly.ips.data	189 bytes	0644
incapsula.ips.data	110 bytes	0644
java-classes.data	1826 bytes	0644
java-code-leakages.data	264 bytes	0644
java-errors.data	240 bytes	0644
lfi-os-files.data	11712 bytes	0644
maxcdn.ips.data	623 bytes	0644
mod_sec.conf	2078 bytes	0644
modsecurity_46_slr_et_joomla.data	1731 bytes	0644
modsecurity_46_slr_et_wordpress.data	1729 bytes	0644
php-config-directives.data	12725 bytes	0644
php-errors.data	75989 bytes	0644
php-function-names-933150.data	3414 bytes	0644
php-function-names-933151.data	38099 bytes	0644
php-variables.data	610 bytes	0644
restricted-files.data	4066 bytes	0644
restricted-upload.data	2513 bytes	0644
scanners-headers.data	216 bytes	0644
scanners-urls.data	418 bytes	0644
scanners-user-agents.data	1950 bytes	0644
scripting-user-agents.data	717 bytes	0644
sig_inspect.lua	68157 bytes	0644
spam-mailer.data	84 bytes	0644
sql-errors.data	4373 bytes	0644
staminus.ips.data	228 bytes	0644
unix-shell.data	7837 bytes	0644
windows-powershell-commands.data	7222 bytes	0644

Name

Size

Permission

Action

10_modsecurity_crs_10_config.conf

37009 bytes

0644