From: Soldatov, Sergey V. (SVSoldatovtnk-bp.com)
Date: Fri Jan 27 2006 - 08:56:11 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi list, I've got a task to search some regexp in clients HTTP POST data
- i.e. there are special headers which values I want to collect in my
RealSecureDB.
I tried to use
pam.userdefined.url_post_data., and
pam.userdefined.url_raw_post_data.
but no success. Using strings and grep against iss-pam1.so, I found
pam.http.post.content. parameter:
# strings iss-pam1.so | grep -i post
userdefined.url_post_data.
http.post.filename.
pam.http.post.content.
userdefined.url_raw_post_data.
pam.http.post.filename.%u=%s%s%s%s
HTTP_POST
/bi/servlet/ThinstallPost
post
URL_Raw_Post_Data
URL_Post_Data
/cgi*/postings.cgi
post-query
/cgi*/post-query.cgi
/cgi*/post-query
#

There is no information in KB #2190

Does anybody know what is it?

Thanks a lot.

---
Best regards, Sergey V. Soldatov.
Information security department.
tel/fax +7 495 745 89 50
tel +7 495 777 77 07 (1613)

_______________________________________________
ISSForum mailing list
ISSForumiss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforumiss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]