diff options
| author | Toni Uhlig <matzeton@googlemail.com> | 2024-04-07 21:50:20 +0200 |
|---|---|---|
| committer | Toni Uhlig <matzeton@googlemail.com> | 2024-04-09 07:47:24 +0200 |
| commit | ab27b2a1fb786f68397cdcaa2ab37b8495578c1a (patch) | |
| tree | 9ce872ff8a879e43a2cb4026844a487e8a0f2baf /src/lib/protocols | |
| parent | f5905a62c7fc1922d0b49e9399d56e8cfee69516 (diff) | |
Add Shellscript risk detection.add/shellscript-risk-detection
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Diffstat (limited to 'src/lib/protocols')
| -rw-r--r-- | src/lib/protocols/ftp_data.c | 8 |
1 files changed, 0 insertions, 8 deletions
diff --git a/src/lib/protocols/ftp_data.c b/src/lib/protocols/ftp_data.c index 048097156..1b5d42ffd 100644 --- a/src/lib/protocols/ftp_data.c +++ b/src/lib/protocols/ftp_data.c @@ -82,10 +82,6 @@ static int ndpi_match_file_header(struct ndpi_detection_module_struct *ndpi_stru if(ndpi_match_strprefix(packet->payload, payload_len, "RIFF")) return 1; - /* MZ is a .exe file */ - if((packet->payload[0] == 'M') && (packet->payload[1] == 'Z') && (packet->payload[3] == 0x00)) - return 1; - /* Ogg files */ if(ndpi_match_strprefix(packet->payload, payload_len, "OggS")) return 1; @@ -118,10 +114,6 @@ static int ndpi_match_file_header(struct ndpi_detection_module_struct *ndpi_stru if((packet->payload[0] == 0x3c) && (packet->payload[1] == 0x3f) && (packet->payload[2] == 0x70) && (packet->payload[3] == 0x68)) return 1; - /* Unix scripts */ - if((packet->payload[0] == 0x23) && (packet->payload[1] == 0x21) && (packet->payload[2] == 0x2f) && (packet->payload[3] == 0x62)) - return 1; - /* PDFs */ if(ndpi_match_strprefix(packet->payload, payload_len, "%PDF")) return 1; |