Hi list, I've got a task to search some regexp in clients HTTP POST data - i.e. there are special headers which values I want to collect in my RealSecureDB. I tried to use pam.userdefined.url_post_data., and pam.userdefined.url_raw_post_data. but no success. Using strings and grep against iss-pam1.so, I found pam.http.post.content. parameter: # strings iss-pam1.so | grep -i post userdefined.url_post_data. http.post.filename. pam.http.post.content. userdefined.url_raw_post_data. pam.http.post.filename.%u=%s%s%s%s HTTP_POST /bi/servlet/ThinstallPost post URL_Raw_Post_Data URL_Post_Data /cgi*/postings.cgi post-query /cgi*/post-query.cgi /cgi*/post-query #
There is no information in KB #2190 Does anybody know what is it? Thanks a lot. --- Best regards, Sergey V. Soldatov. Information security department. tel/fax +7 495 745 89 50 tel +7 495 777 77 07 (1613) _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
