Différences

Ci-dessous, les différences entre deux révisions de la page.

--- informatique:securite:wordfence [10/06/2024 08:40] – Immediately block IPs that access these URLs cyrille
+++ informatique:securite:wordfence [02/08/2024 12:02] (Version actuelle) – [Autour de Wordfence] cyrille
@@ Ligne 1: / Ligne 1: @@
-====== Wordfence (wordpress plugin) ======
+====== Wordfence (wordpress WAF plugin) ======
 Pare-feu d'applications Web ([[/glossaire/WAF]]) pour [[/informatique/wordpress|Wordpress]].
@@ Ligne 8: / Ligne 8: @@
 ===== Configuration =====
+==== General Wordfence Options ====
+Cocher "Bypass the LiteSpeed "noabort" check".
 ==== Advanced Firewall Options ====
@@ Ligne 13: / Ligne 17: @@
 Immediately block IPs that access these URLs:
 <code>
+/.git/*
+/.env
 /wp-config.php
 /wp-content/debug.log
+/vendor/phpunit/*
+</code>
+==== Activity Report ====
+List of directories to exclude from recently modified file list
+<code>
+wp-content/cache
+wp-content/wflogs
+wp-content/et-cache
 </code>
@@ Ligne 21: / Ligne 37: @@
   * [[https://github.com/kadekjayak/notification-wordfence|kadekjayak/notification-wordfence]] Catch Wordfence email alert and send it to your notification channel (Slack or Telegram)
   * [[https://github.com/SentinalMax/LogFence|SentinalMax/LogFence]] Wordfence attack log exporting tool
+  * [[https://github.com/Paolo-Monti/Firewall-WAF-Wordfence|Paolo-Monti/Firewall-WAF-Wordfence]] qui scanne la datatable de Wordfence et reproduit la liste d'ip bloquées sur iptables. C'est un gain de performance notable.
 collection of bad username and file paths for WordFence:
@@ Ligne 53: / Ligne 69: @@
       * learned:waf : "XSS: Cross Site Scripting", "Known malicious User-Agents", "Directory Traversal", "WPGraphQL <= 0.2.3 - Multiple Vulnerable Actions", "Related Posts for WordPress <= 2.0.3 - Reflected Cross-Site Scripting", ...
       * lockedOut, loginFailInvalidUsername, loginFailValidUsername, loginOK, logout, lostPassword, scan:detectproxy, user:passwordReset
-Projets:
-  * [[https://github.com/Paolo-Monti/Firewall-WAF-Wordfence|Paolo-Monti/Firewall-WAF-Wordfence]] qui scan la data table de Wordfence et reproduit la liste d'ip bloquées sur iptables. C'est un gain de performance notable.