On Fri, 27 Feb 2004, Alton Danks wrote:
> Hello,
>
> Am I correct that Tripwire is case sensitive? A message with the following
> content did not score Tripwire.
>
> <!-- MKMQGTJVYVCPUNTOGZEEMZEMMMEQKSZRVQTPJQNIZKOBPPNAEGZKXZWWWNKYKX -->
> <!-- CKQGBAHKONVLGBZCHATYIUFIALWWHKEGGSFBIANDYTBUJCGPGIWZKDJLVXTEOLMYMQG -->
> <html>
> <head>
> <title>Untitled Document</title>
>
> </head>
> ...
>
>
> Looking at the Tripwire tests they appear to be case sensitive. Is there a
> reason for this? How would I modify the test to be case insensitive?
>
> body TW_AJ /[-<!\s]\w{0,10}aj[fqtvxz]\w{0,10}[->\s]/
just add a i to the regex:
body TW_AJ /[-<!\s]\w{0,10}aj[fqtvxz]\w{0,10}[->\s]/i
regards,
Matthias
