requestclassifier.ini [RuleSet-scanner] #

The block [RuleSet-scanner] of settings/requestclassifier.ini, with 3 setting(s).

Never edit settings/requestclassifier.ini itself: an update replaces it. Put the settings you change in an override, which wins over the shipped file:

• settings/override/requestclassifier.ini.append.php for every siteaccess,
• settings/siteaccess/<siteaccess>/requestclassifier.ini.append.php for one siteaccess,
• extension/<extension>/settings/requestclassifier.ini.append.php in an extension (read when the extension is active).

Class #

Matched against the user agent; the rule is the tool's name: sqlmap, nikto, nuclei, masscan, zgrab, wpscan,
dirbuster, dirb, gobuster, feroxbuster, ffuf (Fuzz Faster U Fool), wfuzz, nmap, acunetix, netsparker, nessus,
openvas, w3af, arachni, skipfish, jaeles, hydra, zmeu, jorgee. General clients are no tools and are never flagged
here: curl, wget, python-requests, headless browsers (Playwright, HeadlessChrome), search engines.

Default: empty.

<?php /* #?ini charset="utf-8"?
# settings/override/requestclassifier.ini.append.php
[RuleSet-scanner]
Class=
*/ ?>

Patterns #

Default: an empty list.

<?php /* #?ini charset="utf-8"?
# settings/override/requestclassifier.ini.append.php
[RuleSet-scanner]
# an empty "Patterns[]" first replaces the shipped list; without it the items are added
Patterns[]
*/ ?>

Disabled #

Default: an empty list.

<?php /* #?ini charset="utf-8"?
# settings/override/requestclassifier.ini.append.php
[RuleSet-scanner]
# an empty "Disabled[]" first replaces the shipped list; without it the items are added
Disabled[]
*/ ?>

Related #

• All blocks of requestclassifier.ini
• All INI files
• The settings page

Generated by ./console exp:help:examples from settings/requestclassifier.ini. Do not edit this page: change the source and generate again (how). Free documentation: GFDL 1.3 or later.