WordPress Uploads - Directory Listing
WAF rulehttp:scanMITRE T1595MITRE T1190
- Version
- 0.6
- Name
- crowdsecurity/generic-wordpress-uploads-listing
Protect Wordpress uploads directory from listing files
Install with a top-level collection
1 collection include itsudo cscli collections install ZoeyVid/npmplusInstalls 5 parsers and 54 scenarios, via WAF - Generic Rules.
View NPMplus →Installation
sudo cscli appsec-rules install crowdsecurity/generic-wordpress-uploads-listingThen reload CrowdSec: sudo systemctl reload crowdsec
Sign in to see which of your engines run it →Configuration
Hover a line or a note to see what each field does.
name: crowdsecurity/generic-wordpress-uploads-listingdescription: "Protect Wordpress uploads directory from listing files"rules:- and:- zones:- METHODmatch:type: equalsvalue: GET- zones:- URItransform:- urldecode- lowercasematch:type: regexvalue: '^/wp-content/uploads/(.*/)?$'labels:type: scanservice: httpconfidence: 2spoofable: 0behavior: "http:scan"label: "WordPress Uploads - Directory Listing"classification:- attack.T1595- attack.T1190
Installed on
Know where it runs
Sign in to see the Security Engines that run this waf rule, the version they run and whether it was modified locally.