Différences

Ci-dessous, les différences entre deux révisions de la page.

--- informatique:securite:wordfence [10/06/2024 08:39] – [Autour de Wordfence] cyrille
+++ informatique:securite:wordfence [02/08/2024 12:02] (Version actuelle) – [Autour de Wordfence] cyrille
@@ Ligne 1: / Ligne 1: @@
-====== Wordfence (wordpress plugin) ======
+====== Wordfence (wordpress WAF plugin) ======
 Pare-feu d'applications Web ([[/glossaire/WAF]]) pour [[/informatique/wordpress|Wordpress]].
@@ Ligne 6: / Ligne 6: @@
 Super plugin que je utilise depuis des années sur de nombreux sites.
+===== Configuration =====
+==== General Wordfence Options ====
+Cocher "Bypass the LiteSpeed "noabort" check".
+==== Advanced Firewall Options ====
+Immediately block IPs that access these URLs:
+<code>
+/.git/*
+/.env
+/wp-config.php
+/wp-content/debug.log
+/vendor/phpunit/*
+</code>
+==== Activity Report ====
+List of directories to exclude from recently modified file list
+<code>
+wp-content/cache
+wp-content/wflogs
+wp-content/et-cache
+</code>
+===== Autour de Wordfence =====
+  * [[https://github.com/kadekjayak/notification-wordfence|kadekjayak/notification-wordfence]] Catch Wordfence email alert and send it to your notification channel (Slack or Telegram)
+  * [[https://github.com/SentinalMax/LogFence|SentinalMax/LogFence]] Wordfence attack log exporting tool
+  * [[https://github.com/Paolo-Monti/Firewall-WAF-Wordfence|Paolo-Monti/Firewall-WAF-Wordfence]] qui scanne la datatable de Wordfence et reproduit la liste d'ip bloquées sur iptables. C'est un gain de performance notable.
+collection of bad username and file paths for WordFence:
+  * https://github.com/SimonHayter/Wordfence-Ban-Users-and-URL-list
+  * https://github.com/itconsulting-live/wordpress-urls-to-block
 ===== Wordfence -> firewall =====
@@ Ligne 33: / Ligne 69: @@
       * learned:waf : "XSS: Cross Site Scripting", "Known malicious User-Agents", "Directory Traversal", "WPGraphQL <= 0.2.3 - Multiple Vulnerable Actions", "Related Posts for WordPress <= 2.0.3 - Reflected Cross-Site Scripting", ...
       * lockedOut, loginFailInvalidUsername, loginFailValidUsername, loginOK, logout, lostPassword, scan:detectproxy, user:passwordReset
-Projets:
-  * [[https://github.com/Paolo-Monti/Firewall-WAF-Wordfence|Paolo-Monti/Firewall-WAF-Wordfence]] qui scan la data table de Wordfence et reproduit la liste d'ip bloquées sur iptables. C'est un gain de performance notable.