Joomla 12/14/15 RCE 0day Mitigation

gistfile1.txt

# Joomla 12/14/15 RCE 0day Mitigation
# Note: Use at your own risk. The best mitigation is to patch Joomla to v3.4.6

# Apache mitigation
# 		Apply within .htaccess file

RewriteCond %{HTTP_USER_AGENT} O:[0-9]+:
RewriteRule .* - [F,L]

RewriteCond %{HTTP:X-FORWARDED-FOR} O:[0-9]+:
RewriteRule .* - [F,L]

# Nginx mitigation
# 		Apply within server block

if ( $http_user_agent ~* (\{|\}) ) {
return 403;
}

if ( $http_x_forwarded_for ~* (\{|\}) ) {
return 403;
}