Skip to content

Commit ea2b49d

Browse files
SebitoshSebitosh
committed
Test target DURATION
Signed-off-by: Sebitosh <[email protected]>
1 parent 13aa912 commit ea2b49d

File tree

62 files changed

+1940
-1707
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

62 files changed

+1940
-1707
lines changed

‎config_tests/CONF_000_GLOBAL.yaml‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,16 @@ global:
2222
log,\
2323
msg:'%{MATCHED_VAR_NAME} was caught in phase:${PHASE}$',\
2424
ver:'${VERSION}$'"
25+
- name: "SecRule for TARGETS with ACTIONS"
26+
template: |
27+
SecRule ${TARGET}$ "${OPERATOR}$ ${OPARG}$" \
28+
"id:${CURRID}$,\
29+
phase:${PHASE}$,\
30+
t:none,\
31+
log,\
32+
msg:'%{MATCHED_VAR_NAME} was caught in phase:${PHASE}$ with value %{MATCHED_VAR}',\
33+
${ACTIONS}$,\
34+
ver:'${VERSION}$'"
2535
default_tests_phase_methods:
2636
- 1: get
2737
- 2: post

‎config_tests/CONF_010_TARGET_DURATION.yaml‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
target: DURATION
2+
rulefile: MRTS_010_DURATION.conf
3+
testfile: MRTS_010_DURATION.yaml
4+
templates:
5+
- SecRule for TARGETS with ACTIONS
6+
generation:
7+
before: |
8+
# Set starting duration marker
9+
SecAction "id:${CURRID}$,phase:1, setvar:tx.duration_marker=0"
10+
actions:
11+
- action:
12+
- setvar:tx.duration_marker=%{MATCHED_VAR} # set duration marker at matched value
13+
colkey:
14+
- - ''
15+
operator:
16+
- '@gt'
17+
oparg:
18+
- '%{tx.duration_marker}' # check on previously matched duration as we expect it to increase at each phase
19+
phase:
20+
- 1
21+
- 2
22+
- 3
23+
- 4
24+
- 5
25+
testdata:
26+
phase_methods:
27+
1: get
28+
2: post
29+
3: post
30+
4: post
31+
5: post
32+
targets:
33+
- target: ''
34+
test:
35+
data: null

‎generated/rules/MRTS_010_DURATION.conf‎

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
# Set starting duration marker
2+
SecAction "id:100116,phase:1, setvar:tx.duration_marker=0"
3+
4+
SecRule DURATION "@gt %{tx.duration_marker}" \
5+
"id:100117,\
6+
phase:1,\
7+
t:none,\
8+
log,\
9+
msg:'%{MATCHED_VAR_NAME} was caught in phase:1 with value %{MATCHED_VAR}',\
10+
setvar:tx.duration_marker=%{MATCHED_VAR},\
11+
ver:'MRTS/0.1'"
12+
13+
SecRule DURATION "@gt %{tx.duration_marker}" \
14+
"id:100118,\
15+
phase:2,\
16+
t:none,\
17+
log,\
18+
msg:'%{MATCHED_VAR_NAME} was caught in phase:2 with value %{MATCHED_VAR}',\
19+
setvar:tx.duration_marker=%{MATCHED_VAR},\
20+
ver:'MRTS/0.1'"
21+
22+
SecRule DURATION "@gt %{tx.duration_marker}" \
23+
"id:100119,\
24+
phase:3,\
25+
t:none,\
26+
log,\
27+
msg:'%{MATCHED_VAR_NAME} was caught in phase:3 with value %{MATCHED_VAR}',\
28+
setvar:tx.duration_marker=%{MATCHED_VAR},\
29+
ver:'MRTS/0.1'"
30+
31+
SecRule DURATION "@gt %{tx.duration_marker}" \
32+
"id:100120,\
33+
phase:4,\
34+
t:none,\
35+
log,\
36+
msg:'%{MATCHED_VAR_NAME} was caught in phase:4 with value %{MATCHED_VAR}',\
37+
setvar:tx.duration_marker=%{MATCHED_VAR},\
38+
ver:'MRTS/0.1'"
39+
40+
SecRule DURATION "@gt %{tx.duration_marker}" \
41+
"id:100121,\
42+
phase:5,\
43+
t:none,\
44+
log,\
45+
msg:'%{MATCHED_VAR_NAME} was caught in phase:5 with value %{MATCHED_VAR}',\
46+
setvar:tx.duration_marker=%{MATCHED_VAR},\
47+
ver:'MRTS/0.1'"
48+

‎generated/rules/MRTS_059_REQUEST_COOKIES.conf‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
SecRule REQUEST_COOKIES "@contains attack" \
2-
"id:100116,\
2+
"id:100122,\
33
phase:1,\
44
deny,\
55
t:none,\
@@ -8,7 +8,7 @@ SecRule REQUEST_COOKIES "@contains attack" \
88
ver:'MRTS/0.1'"
99

1010
SecRule REQUEST_COOKIES "@contains attack" \
11-
"id:100117,\
11+
"id:100123,\
1212
phase:2,\
1313
deny,\
1414
t:none,\
@@ -17,7 +17,7 @@ SecRule REQUEST_COOKIES "@contains attack" \
1717
ver:'MRTS/0.1'"
1818

1919
SecRule REQUEST_COOKIES "@contains attack" \
20-
"id:100118,\
20+
"id:100124,\
2121
phase:3,\
2222
deny,\
2323
t:none,\
@@ -26,7 +26,7 @@ SecRule REQUEST_COOKIES "@contains attack" \
2626
ver:'MRTS/0.1'"
2727

2828
SecRule REQUEST_COOKIES "@contains attack" \
29-
"id:100119,\
29+
"id:100125,\
3030
phase:4,\
3131
deny,\
3232
t:none,\
@@ -35,7 +35,7 @@ SecRule REQUEST_COOKIES "@contains attack" \
3535
ver:'MRTS/0.1'"
3636

3737
SecRule REQUEST_COOKIES:cookie1 "@contains attack" \
38-
"id:100120,\
38+
"id:100126,\
3939
phase:1,\
4040
deny,\
4141
t:none,\
@@ -44,7 +44,7 @@ SecRule REQUEST_COOKIES:cookie1 "@contains attack" \
4444
ver:'MRTS/0.1'"
4545

4646
SecRule REQUEST_COOKIES:cookie1 "@contains attack" \
47-
"id:100121,\
47+
"id:100127,\
4848
phase:2,\
4949
deny,\
5050
t:none,\
@@ -53,7 +53,7 @@ SecRule REQUEST_COOKIES:cookie1 "@contains attack" \
5353
ver:'MRTS/0.1'"
5454

5555
SecRule REQUEST_COOKIES:cookie1 "@contains attack" \
56-
"id:100122,\
56+
"id:100128,\
5757
phase:3,\
5858
deny,\
5959
t:none,\
@@ -62,7 +62,7 @@ SecRule REQUEST_COOKIES:cookie1 "@contains attack" \
6262
ver:'MRTS/0.1'"
6363

6464
SecRule REQUEST_COOKIES:cookie1 "@contains attack" \
65-
"id:100123,\
65+
"id:100129,\
6666
phase:4,\
6767
deny,\
6868
t:none,\
@@ -71,7 +71,7 @@ SecRule REQUEST_COOKIES:cookie1 "@contains attack" \
7171
ver:'MRTS/0.1'"
7272

7373
SecRule REQUEST_COOKIES:cookie1|REQUEST_COOKIES:cookie2 "@contains attack" \
74-
"id:100124,\
74+
"id:100130,\
7575
phase:1,\
7676
deny,\
7777
t:none,\
@@ -80,7 +80,7 @@ SecRule REQUEST_COOKIES:cookie1|REQUEST_COOKIES:cookie2 "@contains attack" \
8080
ver:'MRTS/0.1'"
8181

8282
SecRule REQUEST_COOKIES:cookie1|REQUEST_COOKIES:cookie2 "@contains attack" \
83-
"id:100125,\
83+
"id:100131,\
8484
phase:2,\
8585
deny,\
8686
t:none,\
@@ -89,7 +89,7 @@ SecRule REQUEST_COOKIES:cookie1|REQUEST_COOKIES:cookie2 "@contains attack" \
8989
ver:'MRTS/0.1'"
9090

9191
SecRule REQUEST_COOKIES:cookie1|REQUEST_COOKIES:cookie2 "@contains attack" \
92-
"id:100126,\
92+
"id:100132,\
9393
phase:3,\
9494
deny,\
9595
t:none,\
@@ -98,7 +98,7 @@ SecRule REQUEST_COOKIES:cookie1|REQUEST_COOKIES:cookie2 "@contains attack" \
9898
ver:'MRTS/0.1'"
9999

100100
SecRule REQUEST_COOKIES:cookie1|REQUEST_COOKIES:cookie2 "@contains attack" \
101-
"id:100127,\
101+
"id:100133,\
102102
phase:4,\
103103
deny,\
104104
t:none,\
@@ -107,7 +107,7 @@ SecRule REQUEST_COOKIES:cookie1|REQUEST_COOKIES:cookie2 "@contains attack" \
107107
ver:'MRTS/0.1'"
108108

109109
SecRule REQUEST_COOKIES:/^cookie_.*$/ "@contains attack" \
110-
"id:100128,\
110+
"id:100134,\
111111
phase:1,\
112112
deny,\
113113
t:none,\
@@ -116,7 +116,7 @@ SecRule REQUEST_COOKIES:/^cookie_.*$/ "@contains attack" \
116116
ver:'MRTS/0.1'"
117117

118118
SecRule REQUEST_COOKIES:/^cookie_.*$/ "@contains attack" \
119-
"id:100129,\
119+
"id:100135,\
120120
phase:2,\
121121
deny,\
122122
t:none,\
@@ -125,7 +125,7 @@ SecRule REQUEST_COOKIES:/^cookie_.*$/ "@contains attack" \
125125
ver:'MRTS/0.1'"
126126

127127
SecRule REQUEST_COOKIES:/^cookie_.*$/ "@contains attack" \
128-
"id:100130,\
128+
"id:100136,\
129129
phase:3,\
130130
deny,\
131131
t:none,\
@@ -134,7 +134,7 @@ SecRule REQUEST_COOKIES:/^cookie_.*$/ "@contains attack" \
134134
ver:'MRTS/0.1'"
135135

136136
SecRule REQUEST_COOKIES:/^cookie_.*$/ "@contains attack" \
137-
"id:100131,\
137+
"id:100137,\
138138
phase:4,\
139139
deny,\
140140
t:none,\

‎generated/rules/MRTS_060_REQUEST_COOKIES_NAMES.conf‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
SecRule REQUEST_COOKIES_NAMES "@contains attack" \
2-
"id:100132,\
2+
"id:100138,\
33
phase:1,\
44
deny,\
55
t:none,\
@@ -8,7 +8,7 @@ SecRule REQUEST_COOKIES_NAMES "@contains attack" \
88
ver:'MRTS/0.1'"
99

1010
SecRule REQUEST_COOKIES_NAMES "@contains attack" \
11-
"id:100133,\
11+
"id:100139,\
1212
phase:2,\
1313
deny,\
1414
t:none,\
@@ -17,7 +17,7 @@ SecRule REQUEST_COOKIES_NAMES "@contains attack" \
1717
ver:'MRTS/0.1'"
1818

1919
SecRule REQUEST_COOKIES_NAMES "@contains attack" \
20-
"id:100134,\
20+
"id:100140,\
2121
phase:3,\
2222
deny,\
2323
t:none,\
@@ -26,7 +26,7 @@ SecRule REQUEST_COOKIES_NAMES "@contains attack" \
2626
ver:'MRTS/0.1'"
2727

2828
SecRule REQUEST_COOKIES_NAMES "@contains attack" \
29-
"id:100135,\
29+
"id:100141,\
3030
phase:4,\
3131
deny,\
3232
t:none,\
@@ -35,7 +35,7 @@ SecRule REQUEST_COOKIES_NAMES "@contains attack" \
3535
ver:'MRTS/0.1'"
3636

3737
SecRule REQUEST_COOKIES_NAMES:attack1 "@contains attack" \
38-
"id:100136,\
38+
"id:100142,\
3939
phase:1,\
4040
deny,\
4141
t:none,\
@@ -44,7 +44,7 @@ SecRule REQUEST_COOKIES_NAMES:attack1 "@contains attack" \
4444
ver:'MRTS/0.1'"
4545

4646
SecRule REQUEST_COOKIES_NAMES:attack1 "@contains attack" \
47-
"id:100137,\
47+
"id:100143,\
4848
phase:2,\
4949
deny,\
5050
t:none,\
@@ -53,7 +53,7 @@ SecRule REQUEST_COOKIES_NAMES:attack1 "@contains attack" \
5353
ver:'MRTS/0.1'"
5454

5555
SecRule REQUEST_COOKIES_NAMES:attack1 "@contains attack" \
56-
"id:100138,\
56+
"id:100144,\
5757
phase:3,\
5858
deny,\
5959
t:none,\
@@ -62,7 +62,7 @@ SecRule REQUEST_COOKIES_NAMES:attack1 "@contains attack" \
6262
ver:'MRTS/0.1'"
6363

6464
SecRule REQUEST_COOKIES_NAMES:attack1 "@contains attack" \
65-
"id:100139,\
65+
"id:100145,\
6666
phase:4,\
6767
deny,\
6868
t:none,\
@@ -71,7 +71,7 @@ SecRule REQUEST_COOKIES_NAMES:attack1 "@contains attack" \
7171
ver:'MRTS/0.1'"
7272

7373
SecRule REQUEST_COOKIES_NAMES:attack1|REQUEST_COOKIES_NAMES:attack2 "@contains attack" \
74-
"id:100140,\
74+
"id:100146,\
7575
phase:1,\
7676
deny,\
7777
t:none,\
@@ -80,7 +80,7 @@ SecRule REQUEST_COOKIES_NAMES:attack1|REQUEST_COOKIES_NAMES:attack2 "@contains a
8080
ver:'MRTS/0.1'"
8181

8282
SecRule REQUEST_COOKIES_NAMES:attack1|REQUEST_COOKIES_NAMES:attack2 "@contains attack" \
83-
"id:100141,\
83+
"id:100147,\
8484
phase:2,\
8585
deny,\
8686
t:none,\
@@ -89,7 +89,7 @@ SecRule REQUEST_COOKIES_NAMES:attack1|REQUEST_COOKIES_NAMES:attack2 "@contains a
8989
ver:'MRTS/0.1'"
9090

9191
SecRule REQUEST_COOKIES_NAMES:attack1|REQUEST_COOKIES_NAMES:attack2 "@contains attack" \
92-
"id:100142,\
92+
"id:100148,\
9393
phase:3,\
9494
deny,\
9595
t:none,\
@@ -98,7 +98,7 @@ SecRule REQUEST_COOKIES_NAMES:attack1|REQUEST_COOKIES_NAMES:attack2 "@contains a
9898
ver:'MRTS/0.1'"
9999

100100
SecRule REQUEST_COOKIES_NAMES:attack1|REQUEST_COOKIES_NAMES:attack2 "@contains attack" \
101-
"id:100143,\
101+
"id:100149,\
102102
phase:4,\
103103
deny,\
104104
t:none,\
@@ -107,7 +107,7 @@ SecRule REQUEST_COOKIES_NAMES:attack1|REQUEST_COOKIES_NAMES:attack2 "@contains a
107107
ver:'MRTS/0.1'"
108108

109109
SecRule REQUEST_COOKIES_NAMES:/^attack_.*$/ "@contains attack" \
110-
"id:100144,\
110+
"id:100150,\
111111
phase:1,\
112112
deny,\
113113
t:none,\
@@ -116,7 +116,7 @@ SecRule REQUEST_COOKIES_NAMES:/^attack_.*$/ "@contains attack" \
116116
ver:'MRTS/0.1'"
117117

118118
SecRule REQUEST_COOKIES_NAMES:/^attack_.*$/ "@contains attack" \
119-
"id:100145,\
119+
"id:100151,\
120120
phase:2,\
121121
deny,\
122122
t:none,\
@@ -125,7 +125,7 @@ SecRule REQUEST_COOKIES_NAMES:/^attack_.*$/ "@contains attack" \
125125
ver:'MRTS/0.1'"
126126

127127
SecRule REQUEST_COOKIES_NAMES:/^attack_.*$/ "@contains attack" \
128-
"id:100146,\
128+
"id:100152,\
129129
phase:3,\
130130
deny,\
131131
t:none,\
@@ -134,7 +134,7 @@ SecRule REQUEST_COOKIES_NAMES:/^attack_.*$/ "@contains attack" \
134134
ver:'MRTS/0.1'"
135135

136136
SecRule REQUEST_COOKIES_NAMES:/^attack_.*$/ "@contains attack" \
137-
"id:100147,\
137+
"id:100153,\
138138
phase:4,\
139139
deny,\
140140
t:none,\

0 commit comments

Comments
 (0)