Skip to content

Instantly share code, notes, and snippets.

Avatar
🎯
Focusing

Phil E. Taylor PhilETaylor

🎯
Focusing
View GitHub Profile
View gist:50f4da196e3d88f2921327b1bd1970ad
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5c:0b:96:f8:6e:5a:2a:04:11:c4:01:5b:23:a3:b0:22:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
Validity
Not Before: Jul 2 05:58:27 2019 GMT
Not After : Sep 30 05:58:27 2019 GMT
View gist:e18c0d8f48409160f12d8ee0f84f6b27
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5c:0b:96:f8:6e:5a:2a:04:11:c4:01:5b:23:a3:b0:22:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
Validity
Not Before: Jul 2 05:58:27 2019 GMT
Not After : Sep 30 05:58:27 2019 GMT
View gist:bbec095d97360d1337d9571681b2dc91
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<title>Visitor anti-robot validation</title>
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
<meta name="robots" content="noindex, nofollow" />
<meta name="keywords"
content="joomla, Joomla, joomla 1.5, wordpress 2.5, Drupal" />
View gist:19edb19a7b6c0cef6d8cc434ba550cac
The ONLY time the md5 hash of those files should change is when you change the file.
The only time the files need to be changed is when a site is upgraded. However, even then, if there are no changes in the new version in those files then the hash can remain the same.
We cache the md5 hash of the file into a file, in the same folder, buy proceeded with a period (.)
On every page load of the website we compare the md5 hash of the monitored files, with the cached md5 hash in the lock file we created.
If they are different then SOMETHING has changed in the monitored file, and we alert you on that.
View webp
<ifModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTP_ACCEPT} image/webp
RewriteCond %{REQUEST_URI} (?i)(.*)(\.jpe?g|\.png)$
RewriteCond %{DOCUMENT_ROOT}%1.webp -f
RewriteRule (?i)(.*)(\.jpe?g|\.png)$ %1\.webp [L,T=image/webp,R]
</IfModule>
<IfModule mod_headers.c>
Header append Vary Accept env=REDIRECT_accept
View gist:82a8df04bf7ba8acd5fd8318488001f2
[2019-10-23 09:26:11] api-debugger.INFO: >>>>>>>>
POST /plugins/system/bfnetwork/bfnetwork/bfPing.php HTTP/1.1
Content-Length: 670
Referer: https://myjoomla.com/
User-Agent: myJoomla/2.0 (myJoomla.com)
X-MyJoomla-FAQ: For full details see myJoomla.com or email phil@phil-taylor.com
Content-Type: application/x-www-form-urlencoded
Host: besparen.interessantvoorjou.nl
X-MYJOOMLA-HMAC: IBJrtaptsnNiM0vubbR7UK3AmKIPrGhbnk2otY9JaEk=
X-MYJOOMLA-TIME: 1571822770
View example_auditrow.json
{
"data":
[
{
"id": 1,
"site_id": 1,
"user_id": 1,
"status": "BLOB",
"scanspeed": "FAST",
"retrycount": null,
View gist:80cec12f9148c6a2dda9f3c9529261d3
[2019-09-22 10:21:14] api-debugger.INFO: >>>>>>>>
POST /wp-content/plugins/mywpguru/bfnetwork/bfAudit.php HTTP/1.1
Content-Length: 1276
Referer: https://myjoomla.com/
User-Agent: myJoomla/2.0 (myJoomla.com)
X-MyJoomla-FAQ: For full details see myJoomla.com or email phil@phil-taylor.com
Content-Type: application/x-www-form-urlencoded
Host: wyspataichi.waw.pl
X-MYJOOMLA-HMAC: fXg+tYMbjw2C0ZH7tuj6lzMh8/s8efUX1dIkzrajl2E=
X-MYJOOMLA-TIME: 1569147553
View gist:951dbdc1a090138f71c33cb254e3d38f
[2019-09-22 10:15:27] api-debugger.INFO: >>>>>>>>
POST /wp-content/plugins/mywpguru/bfnetwork/bfAudit.php HTTP/1.1
Content-Length: 658
Referer: https://myjoomla.com/
User-Agent: myJoomla/2.0 (myJoomla.com)
X-MyJoomla-FAQ: For full details see myJoomla.com or email phil@phil-taylor.com
Content-Type: application/x-www-form-urlencoded
Authorization: Basic amVzdGVtOmN6bG93aWVraWVt
Host: al-halo-echo.pl
X-MYJOOMLA-HMAC: hZ1YO92IsUXfXUbdGqhLxfwY3Gq7XiAQQqqnJEiE9ho=
View gist:1a0fd253e64f32ea0ef32d5db2822cb7
[2019-09-22 10:15:27] api-debugger.INFO: >>>>>>>>
POST /wp-content/plugins/mywpguru/bfnetwork/bfAudit.php HTTP/1.1
Content-Length: 658
Referer: https://myjoomla.com/
User-Agent: myJoomla/2.0 (myJoomla.com)
X-MyJoomla-FAQ: For full details see myJoomla.com or email phil@phil-taylor.com
Content-Type: application/x-www-form-urlencoded
Authorization: Basic amVzdGVtOmN6bG93aWVraWVt
Host: al-halo-echo.pl
X-MYJOOMLA-HMAC: hZ1YO92IsUXfXUbdGqhLxfwY3Gq7XiAQQqqnJEiE9ho=