Skip to content

Instantly share code, notes, and snippets.

$ tail -f /tmp/jit.dump
---- TRACE 1 start access_by_lua(nginx.conf:60):2
0005 GGET 4 0 ; "ngx" (access_by_lua(nginx.conf:60):3)
0006 TGETS 4 4 1 ; "get_phase" (access_by_lua(nginx.conf:60):3)
0007 CALL 4 2 1 (access_by_lua(nginx.conf:60):3)
0000 . FUNCC ; C:55d170597150
---- TRACE 1 IR
0001 int SLOAD #1 CI
0002 fun SLOAD #0 R
0003 tab FLOAD 0002 func.env
poprocks@screech ~ [17:47:53] [0] $ http poprockitdropit.kong-cloud.com
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 11
Content-Type: application/octet-stream
Date: Sat, 21 Jul 2018 00:48:29 GMT
Kong-Request-ID: 80b3a6e55ff14f0d1c48a7f0c469d42c
Server: nginx/1.14.0
Via: kong/0.33-enterprise-edition
X-Cache-Key: df8da42347ce62821042daec2fec6df0
/*
* ModSecurity, http://www.modsecurity.org/
* Copyright (c) 2015 Trustwave Holdings, Inc. (http://www.trustwave.com/)
*
* You may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* If any of the files related to licensing are missing or if you have any
### Keybase proof
I hereby claim:
* I am p0pr0ck5 on github.
* I am p0pr0ck5 (https://keybase.io/p0pr0ck5) on keybase.
* I have a public key ASAiNFJqLmvB0MHqxL8kRb6EsT6lRQxsNL5FrAwXwnFvvAo
To claim this, I am signing this object:
$ cat test.c
/*
* ModSecurity, http://www.modsecurity.org/
* Copyright (c) 2015 Trustwave Holdings, Inc. (http://www.trustwave.com/)
*
* You may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
ny,auditlog,t:none"
SecRule ARGS|ARGS_NAMES|REQUEST_COOKIES|REQUEST_COOKIES_NAMES "@streq foo" "id:12347,phase:1,deny,auditlog,t:none"
SecRule ARGS|ARGS_NAMES|REQUEST_COOKIES|REQUEST_COOKIES_NAMES "@streq foo" "id:12348,phase:1,deny,auditlog,t:none"
SecRule ARGS|ARGS_NAMES|REQUEST_COOKIES|REQUEST_COOKIES_NAMES "@streq foo" "id:12349,phase:1,deny,auditlog,t:none"
SecRule ARGS|ARGS_NAMES|REQUEST_COOKIES|REQUEST_COOKIES_NAMES "@streq foo" "id:12350,phase:1,deny,auditlog,t:none"
SecRule ARGS|ARGS_NAMES|REQUEST_COOKIES|REQUEST_COOKIES_NAMES "@streq foo" "id:12351,phase:1,deny,auditlog,t:none"
SecRule ARGS|ARGS_NAMES|REQUEST_COOKIES|REQUEST_COOKIES_NAMES "@streq foo" "id:12352,phase:1,deny,auditlog,t:none"
SecRule ARGS|ARGS_NAMES|REQUEST_COOKIES|REQUEST_COOKIES_NAMES "@streq foo" "id:12353,phase:1,deny,auditlog,t:none"
SecRule ARGS|ARGS_NAMES|REQUEST_COOKIES|REQUEST_COOKIES_NAMES "@streq foo" "id:12354,phase:1,deny,auditlog,t:none"
SecRule ARGS|ARGS_NAMES|REQUEST_COOKIES|REQUEST_COOKIES_NAMES "@streq foo" "id:12355
#!/usr/bin/perl
use strict;
use warnings;
my $x = 12345;
my $i = 1;
for ($i; $i < 6; $i++) {
my $j = 0;
poprocks@mini-vm:~/src/ModSecurity/examples/simple_example_using_c$ cat test.c
/*
* ModSecurity, http://www.modsecurity.org/
* Copyright (c) 2015 Trustwave Holdings, Inc. (http://www.trustwave.com/)
*
* You may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
[02/Apr/2018:14:07:23 --0700] [localhost/sid#7f81e7acf850][rid#7f81e7a120a0][/][4] Recipe: Invoking rule 7f81e7adb240; [file "/etc/modsecurity/modsecurity.conf"] [line "181"] [id "12346"].
[02/Apr/2018:14:07:23 --0700] [localhost/sid#7f81e7acf850][rid#7f81e7a120a0][/][5] Rule 7f81e7adb240: SecAction "phase:1,log,auditlog,pass,ctl:ruleRemoveTargetById=1234123413;REQUEST_HEADERS:Cookie,id:12346"
[02/Apr/2018:14:07:23 --0700] [localhost/sid#7f81e7acf850][rid#7f81e7a120a0][/][4] Transformation completed in 0 usec.
[02/Apr/2018:14:07:23 --0700] [localhost/sid#7f81e7acf850][rid#7f81e7a120a0][/][4] Executing operator "unconditionalMatch" with param "" against REMOTE_ADDR.
[02/Apr/2018:14:07:23 --0700] [localhost/sid#7f81e7acf850][rid#7f81e7a120a0][/][9] Target value: "127.0.0.1"
[02/Apr/2018:14:07:23 --0700] [localhost/sid#7f81e7acf850][rid#7f81e7a120a0][/][4] Operator completed in 1 usec.
[02/Apr/2018:14:07:23 --0700] [localhost/sid#7f81e7acf850][rid#7f81e7a120a0][/][4] Ctl: ruleRemoveTargetById id=1234123413 targe
@@ -3,7 +3,7 @@
## [0.11.0rc1] - 2017/06/26
The Kong development team is very excited to present you with its latest work!
-With this release come two major features that we have been working on
+With this release comes two major features that we have been working on
for the last couple of months: a new invalidations mechanism that does not
depend on Serf, and the support for the `search` and `ndots` options in our
internal DNS resolver.
@@ -84,7 +84,7 @@ if you are running a Kong cluster already.