刘文坛
|
df36b8987b
|
[FEATURE]compile/plugin/xx_plugin table support gc
|
2023-06-19 09:44:25 +00:00 |
|
刘文坛
|
c5accc49f2
|
[PATCH] maat_plugin_table_get_ex_data add key_len (23.06)
|
2023-06-08 07:32:41 +00:00 |
|
liuwentan
|
029a391f5d
|
[patch]keep maat23.05 compatibility
|
2023-05-31 13:28:16 +08:00 |
|
liuwentan
|
51e29f0b95
|
[FEATURE]plugin table support ip_addr key type
|
2023-05-30 16:16:18 +08:00 |
|
刘文坛
|
464dc43cc4
|
fix group_exclude logic miss & add some corner case
|
2023-05-23 03:23:39 +00:00 |
|
liuwentan
|
929d6ac139
|
[patch]change verify expression retval semantics:1(legal) 0(illegal)
|
2023-05-11 11:21:46 +08:00 |
|
liuwentan
|
e97adb8b97
|
[feature]verify regex expression
|
2023-05-09 17:45:43 +08:00 |
|
liuwentan
|
f7bde76fcf
|
support more than one hierarchical group referenced(max hierarchical level: 5)
|
2023-05-08 16:39:58 +08:00 |
|
liuwentan
|
8a3683fa30
|
group_exclude(only one hierarchical group can be referenced)
|
2023-05-06 20:27:39 +08:00 |
|
liuwentan
|
658625fde3
|
fix clause update bug and stream scan bug
|
2023-03-29 14:29:34 +08:00 |
|
liuwentan
|
73060d1c35
|
support ip+port+proto scan
|
2023-03-27 15:52:47 +08:00 |
|
liuwentan
|
a67d24381e
|
table_info.conf support table_name & db_tables to implement all physical tables conjunction
|
2023-03-22 20:40:36 +08:00 |
|
liuwentan
|
23ef2c3797
|
support same pattern different offset(x-x:pat1 & y-y:pat1)
|
2023-03-22 11:10:00 +08:00 |
|
liuwentan
|
37447eef7f
|
adapter_hs engine only construct stream db
|
2023-03-17 17:28:52 +08:00 |
|
liuwentan
|
8312b69fda
|
maat_options set logger -> set log_path
|
2023-03-16 15:16:42 +08:00 |
|
liuwentan
|
15ec1549c8
|
plugin table support integer&pointer key type
|
2023-03-16 09:55:35 +08:00 |
|
liuwentan
|
cf5c8353e3
|
Support physical table conjunction and fix compile table conjunction bug
|
2023-03-06 10:45:36 +08:00 |
|
liuwentan
|
5a53edd943
|
format log
|
2023-03-02 14:52:31 +08:00 |
|
liuwentan
|
d429a6346d
|
support flag_plus table
|
2023-03-01 17:44:07 +08:00 |
|
liuwentan
|
1566a30002
|
ipmatcher rule_id -> long long & scanner engine centralization
|
2023-03-01 09:32:36 +08:00 |
|
liuwentan
|
c3b15c69c4
|
add boundary check
|
2023-02-27 10:07:37 +08:00 |
|
liuwentan
|
ddfd0a503d
|
fix maat_scan_string maat_state bug
|
2023-02-23 19:08:26 +08:00 |
|
liuwentan
|
f8543d9f96
|
table_name->table_id and compile table callback
|
2023-02-21 11:27:18 +08:00 |
|
liuwentan
|
bbed56db80
|
compile table support conjunction, ip_plugin support cidr
|
2023-02-20 10:57:40 +08:00 |
|
liuwentan
|
f688a99bd0
|
add ci config
|
2023-02-16 11:13:23 +08:00 |
|
liuwentan
|
d5e6808e1f
|
support expr offset match
|
2023-02-09 22:13:15 +08:00 |
|
liuwentan
|
25f944a1d1
|
unfinished work
|
2023-01-30 21:59:35 +08:00 |
|
liuwentan
|
9778267b48
|
add dynamic config unit-test and hierarchy unfinished
|
2022-12-14 15:28:21 +08:00 |
|
liuwentan
|
ea4c1ba4c3
|
add json/redis rule parser
|
2022-12-03 22:23:41 +08:00 |
|
zhengchao
|
7e860f2c58
|
Refactor from scratch.
|
2022-10-26 14:41:22 +08:00 |
|
zhengchao
|
10118ffed3
|
Add unit test cases for Boolean Expression Plugin (bool_plug) table.
|
2022-08-23 18:32:03 +08:00 |
|
zhengchao
|
9e91bc0973
|
Expr_plus表增加中英文混合district的测试用例
|
2021-10-20 10:54:55 +03:00 |
|
zhengchao
|
d954c5a011
|
expr_plus和interval_plus表的district对英文大小写不敏感。
|
2021-10-20 00:02:43 +03:00 |
|
zhengchao
|
51b26e3a54
|
修复expr_plus和expr混合扫描时，expr漏命中的问题。
|
2021-10-12 09:55:53 +03:00 |
|
zhengchao
|
593bcfb907
|
修复 TSG-7994 ，避免处理未知district时出现误命中。
|
2021-10-11 12:00:26 +03:00 |
|
liuxueli
|
a2f2adc82a
|
策略中的district与扫描时设置的district不一致时命中了策略
|
2021-10-11 14:57:18 +08:00 |
|
liuxueli
|
c84fb97aae
|
如果扫描无规则数值类型的table时直接返回，导致未进行非表达式的运算。
|
2021-08-20 14:44:09 +08:00 |
|
zhengchao
|
465ad3ca6a
|
如果扫描无规则table时直接返回，导致未进行非表达式的运算。
|
2021-08-19 21:47:38 +08:00 |
|
zhengchao
|
293ad8e21c
|
让非表达式的测试用例更复杂
|
2021-08-19 21:47:38 +08:00 |
|
zhengchao
|
bcba756119
|
增加非表达式测试用例：对于compile {url!=a&ip=b}， 先扫非条件（url不命中），后扫命中条件（ip命中）
|
2021-08-19 21:47:37 +08:00 |
|
zhengchao
|
3cc9c5dcb7
|
增加IP Composition表的非规则测试用例
|
2021-08-19 21:47:37 +08:00 |
|
zhengchao
|
a58baa274f
|
为刘梦岩2021-5-15提出的IPv6误命中bug，增加单元测试用例。该问题已在rulescan_VERSION_2020_12_20、MAAT_FRAME_VERSION_3_1_21_20210513重现。
|
2021-05-17 20:07:51 +08:00 |
|
zhengchao
|
c5239762fe
|
增加测试用例：正则规则中不包含字符串
|
2021-04-28 12:07:12 +08:00 |
|
zhengchao
|
e3b3288dc1
|
集成支持expr_id的bool matcher
|
2021-04-19 10:27:11 +08:00 |
|
zhengchao
|
f908f2e3ac
|
修复加载8个字符串与表达式报错的bug TSG-4717；增加Hierarchy日志中输出去重后Clause的数量。
|
2020-12-16 10:51:34 +06:00 |
|
zhengchao
|
e9a9c89116
|
增加IP composition的测试用例，确认端口范围的起始不能为1。
|
2020-11-24 21:08:40 +06:00 |
|
刘学利
|
b29714d006
|
Feature fqdn plugin
|
2020-09-28 16:53:40 +08:00 |
|
liuxueli
|
0c694b5f98
|
增加增强数值扫描功能及对应测试用例
增加changelog到rpm包
|
2020-08-22 18:52:25 +08:00 |
|
zhengchao
|
2dbbd55c95
|
version3单元测试通过。
|
2020-06-22 20:26:44 +08:00 |
|
zhengchao
|
df19a8ce71
|
通过原有功能的单元测试。
|
2020-06-22 20:26:43 +08:00 |
|