Page 1 of 1

Website Defacement

Posted: Mon May 16, 2016 5:55 am
by raamardhani7
Hi Team,

We are looking in depth monitoring for website.

Scenario1: there will be content written in the website by the owner and there might be hackers who modifies that content, tool should report that the content is modified by someone?
Senarios2: Website redirection, if I am using www.nagios.com and hacker prepares similar webpage and is redirecting my page to www.naagios.com (extra a added in nagios), which I may not notice, wanted to have this reported too.?

Will Nagios be able to do capture these details? Could you please help me here. this is at highest requirement for us. thanks.

Re: Website Defacement

Posted: Mon May 16, 2016 8:46 am
by rkennedy
You will want to use the -r flag to match regex -

Code: Select all

 -r, --regex, --ereg=STRING
    Search page for regex STRING
As for the redirection, if you use the -f parameter then i will follow redirections, if you don't then it won't. You'll want to specify a code to expect as well which is -e -

Code: Select all

 -e, --expect=STRING
    Comma-delimited list of strings, at least one of them is expected in
    the first (status) line of the server response (default: HTTP/1.)
    If specified skips all other status line logic (ex: 3xx, 4xx, 5xx processing)

Re: Website Defacement

Posted: Thu May 19, 2016 6:34 am
by raamardhani7
rkennedy wrote:You will want to use the -r flag to match regex -

Code: Select all

 -r, --regex, --ereg=STRING
    Search page for regex STRING
As for the redirection, if you use the -f parameter then i will follow redirections, if you don't then it won't. You'll want to specify a code to expect as well which is -e -

Code: Select all

 -e, --expect=STRING
    Comma-delimited list of strings, at least one of them is expected in
    the first (status) line of the server response (default: HTTP/1.)
    If specified skips all other status line logic (ex: 3xx, 4xx, 5xx processing)
Hi Rkennedy,

thanks a lot for the information, you can close this thread.