Can you give me an example ?


On Tue, Oct 25, 2011 at 10:12 AM, Marc Stern <> wrote:
We may miss some attack patterns if we do not get the binary

-------- Original Message --------
Subject:        [mod-security-users] t:sqlHexDecode
Date:   Mon, 24 Oct 2011 09:18:07 -0500
From:   Breno Silva <>
To:     Mod Security <>

Hello all,

Want to get a feedback from you. I'm adding a new tfn called
sqlHexDecode that will decode 0x... data.
I was thinking about to not try to decode non-printable hex pairs,
thinking it should be easier for all of you write rules.

So, an input like:  0x4142431344 will be ABC13D. If i apply decode for
all pairs we will have ABC\x13D.

Appreciate any comments.



The demand for IT networking professionals continues to grow, and the
demand for specialized networking skills is growing even more rapidly.
Take a complimentary Learning@Cisco Self-Assessment and learn
about Cisco certifications, training, and career opportunities.
mod-security-users mailing list
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs: