Website Defacement

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
raamardhani7
Posts: 459
Joined: Tue Jun 02, 2015 12:36 am

Website Defacement

Post by raamardhani7 »

Hi Team,

We are looking in depth monitoring for website.

Scenario1: there will be content written in the website by the owner and there might be hackers who modifies that content, tool should report that the content is modified by someone?
Senarios2: Website redirection, if I am using www.nagios.com and hacker prepares similar webpage and is redirecting my page to www.naagios.com (extra a added in nagios), which I may not notice, wanted to have this reported too.?

Will Nagios be able to do capture these details? Could you please help me here. this is at highest requirement for us. thanks.
rkennedy
Posts: 6579
Joined: Mon Oct 05, 2015 11:45 am

Re: Website Defacement

Post by rkennedy »

You will want to use the -r flag to match regex -

Code: Select all

 -r, --regex, --ereg=STRING
    Search page for regex STRING
As for the redirection, if you use the -f parameter then i will follow redirections, if you don't then it won't. You'll want to specify a code to expect as well which is -e -

Code: Select all

 -e, --expect=STRING
    Comma-delimited list of strings, at least one of them is expected in
    the first (status) line of the server response (default: HTTP/1.)
    If specified skips all other status line logic (ex: 3xx, 4xx, 5xx processing)
Former Nagios Employee
raamardhani7
Posts: 459
Joined: Tue Jun 02, 2015 12:36 am

Re: Website Defacement

Post by raamardhani7 »

rkennedy wrote:You will want to use the -r flag to match regex -

Code: Select all

 -r, --regex, --ereg=STRING
    Search page for regex STRING
As for the redirection, if you use the -f parameter then i will follow redirections, if you don't then it won't. You'll want to specify a code to expect as well which is -e -

Code: Select all

 -e, --expect=STRING
    Comma-delimited list of strings, at least one of them is expected in
    the first (status) line of the server response (default: HTTP/1.)
    If specified skips all other status line logic (ex: 3xx, 4xx, 5xx processing)
Hi Rkennedy,

thanks a lot for the information, you can close this thread.
Locked