Thread Closed 
Beta Config (Sep 19 2010)
Oct. 09, 2010, 04:15 PM
Post: #78
RE: Beta Config (Sep 19 2010)
After this update Proxomitron will also inspect files for JS content, which come as text/css.

Code:
[Patterns]
Name = "Top JS Mark: Start     10.10.09 (multi) [sd] (d.r)"
Active = TRUE
Multi = TRUE
URL = "^$TST(keyword=*.(a_js|a_jssigns).*)"
Limit = 4
Match = "(^\s|ø|þ||»¿|¿)$TST(mHtml=0*)$STOP()(<!--|)\1"
Replace = "\1\þ\þ\ø"

Name = "Top Sniff: JS & VBS Content     10.10.09 [sd] (d.2 l.3)"
Active = TRUE
URL = "($TST(hCT=*html)|$TYPE(css)|$TYPE(oth))$TST(uHost=*)(^$TST(keyword=*.(a_js|a_jssigns|i_level:[12]).*))"
Limit = 5500
Match = "þþø$STOP()$TST(mHtml=0*)($TST(comment=1)[^\r\n]+\s(<!--[^\r\n]+\s)+|)"
        "(; ;+( /\**\*/)+)+ ("
        "//|((\( |)function(\s[^( ]+|)|(un|)escape|eval|if) \("
        "|var\s|sub\s|try {|new[ ](Object|Function) \("
        "|(document|window|self).[a-z]"
        "|[a-z_$][a-z0-9_.]+ (\= ("
        "($AVQ("*) ;|(^")(new[ ][^ \r\n;]+|[#*:*] ;|[a-z_$][a-z0-9_.$]+ [;{[(]))"
        "|\[+ {(^?++{1,70}: " <)(??)\5$SET(script=s-js)|[[{(]"
        ")"
        "|\([{[]+"(?)\5$SET(script=s-js)"
        ")"
        ")"
        ""
        "&"
        "($TST(hOrigRef=\4)|)($IHDR(Content-Type:( ) \6)|)$SET(0=Killed \9)"
        "("
        "($TST(\6=image/*)$SET(9=image)|$TST(flag=*.cont_typ_b:[12].*)$SET(9=blocking flag))"
        "($TST(volat=*.log:[12]c.*)$ADDLST(Log-Rare,WEB JS_Sniff \0 \t\u Ref: \4 CT: \6)|)"
        "|"
        "$TST(flag=*.adurl:1.*)(^$TST(keyword=*.(a_ads|a_js|a_adjs).*))"
        "$URL((*(:)\3)+{1}//("
        ""
        "($LST(AdHosts-J))\8$SET(1=\7\r\n\r\n)$SET(9=AdHj \8)"
        "|(^$TST(flag=*.adhost:[#*:0].*))($LST(AdHosts))\8(^[a-z0-9])$SET(9=AdH \8)"
        "|([^/]++.|)($LST(AdDomains))\8(^[a-z0-9])$SET(9=AdD \8)"
        "|[^/?]+("
        "(^$TST(flag=*.adpath:[#*:0].*))*[/._?&;=-]($LST(AdPaths))\8(^[a-z0-9])$SET(9=AdP \8)"
        "|(^$TST(keyword=*.a_track_s.*))"
        "*[/.=_-]($LST(AdPaths-J)(^[a-z0-9]))\8$SET(1=\7\r\n\r\n)$SET(9=AdPj \8)"
        ")"
        ""
        "))"
        ")"
        ""
        "|"
        "(^$TST(mHtml=*ajax)|$TST(volat=*.post:1.*))$SET(0=Refetch)"
        "((^$TST(\5=*))|$TST(\5=??)"
        "$TST(volat=*.log:2*)$ADDLST(Log-Main,[$DTM(d T)]\tWEB JS_Sniff s-js \t\u Ref: \4 CT: \6)PrxFail$TST()"
        ")($TST(uProt=\5&https:)$TST(keyword=*.i_ssl_h:[12].*)$SET(3=http://https-px-.)|$SET(3=\5//))"
        "($OHDR(Referer:( ) \#)|)"
        "$SET(9=$GET(uHost)$GET(uPort)\p\q)"
        "$ADDLST(Mem-ScriptSrc,$WESC(\9)(^?))$SET(8=\3\9?prx-sniff:javascript&prx-ref:\@)"
        "$SET(1="
        "<!--\r\n"
        "(function () {\r\n"
        "  var bUrl = "\8";\r\n"
        "  if (document.write && window.prxO && prxO.oiLoaded == 1)\r\n"
        "    document.write("<script type=\\"text/javascript\\" src=\\"" + bUrl + "\\"></script>");\r\n"
        "  else {\r\n"
        "    if (!window.PrxAppendJs)\r\n"
        "      window.PrxAppendJs = function (aUrl) {\r\n"
        "        var scr = document.getElementsByTagName("script"),\r\n"
        "        xns = document.documentElement.namespaceURI,\r\n"
        "        tag = xns ? document.createElementNS(xns, "script") : document.createElement("script");\r\n"
        "        tag.type = "text/javascript"; tag.src = aUrl;\r\n"
        "        scr = scr[scr.length - 1]; scr.parentNode.appendChild(tag);\r\n"
        "      }\r\n"
        "    PrxAppendJs(bUrl);\r\n"
        "    window.prxO && prxO.oInt && prxO.oInt.inFooter(4, "Late JS", "$ESC(\0 - \2 - \6)", 1);\r\n"
        "  }\r\n"
        "}) ();\r\n\r\n"
        ")"
        ""
        "&"
        "($TST(uFile=;+([^,;=]+)\2*)|$SET(a=\q)($TST(a=(\2[&;]*|\2))|$SET(2=/)))"
        "($TST(volat=*.log:2*)$ADDLST(Log-Main,[$DTM(d T)]\tWEB JS_Sniff \0 \t\u Ref: \4 CT: \6)|)"
Replace = "// <br><br> PROX: SCRIPT REPLACED BY JS SNIFFER \(\0\). <br><br>\r\n\r\n"
          "\1"
          "if (window.prxO && prxO.oNce) {\r\n"
          "  if (!prxO.oNce.ncJsKills) prxO.oNce.ncJsKills = [];\r\n"
          "  prxO.oNce.ncJsKills.push(["Sniffer", "   $ESC(\0 - \2 - \6)"])\r\n"
          "}\r\n"
          "//-->$SET(a=)\k"

Name = "Top JS: Mark End     10.10.09 [sd] (d.r)"
Active = TRUE
URL = "^$TST(keyword=*.(a_js|a_jssigns).*)"
Limit = 3
Match = "þþø$STOP()"
Thread Closed 


Messages In This Thread
Beta Config (Sep 19 2010) - sidki3003 - Sep. 19, 2010, 03:59 PM
RE: Beta Config (Sep 19 2010) - eclipse - Sep. 19, 2010, 05:38 PM
RE: Beta Config (Sep 19 2010) - Toppy - Sep. 19, 2010, 07:24 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Sep. 24, 2010, 06:04 PM
RE: Beta Config (Sep 19 2010) - Kye-U - Sep. 25, 2010, 12:16 AM
RE: Beta Config (Sep 19 2010) - sidki3003 - Sep. 19, 2010, 07:40 PM
RE: Beta Config (Sep 19 2010) - ProxRocks - Sep. 22, 2010, 12:02 AM
RE: Beta Config (Sep 19 2010) - sidki3003 - Sep. 24, 2010, 06:06 PM
RE: Beta Config (Sep 19 2010) - ProxRocks - Sep. 24, 2010, 09:06 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Sep. 22, 2010, 06:11 PM
RE: Beta Config (Sep 19 2010) - ProxRocks - Sep. 22, 2010, 06:17 PM
RE: Beta Config (Sep 19 2010) - apacallyps - Sep. 23, 2010, 03:49 PM
RE: Beta Config (Sep 19 2010) - ProxRocks - Sep. 23, 2010, 07:06 PM
RE: Beta Config (Sep 19 2010) - apacallyps - Sep. 27, 2010, 11:47 PM
RE: Beta Config (Sep 19 2010) - nightfishing - Sep. 23, 2010, 10:31 PM
RE: Beta Config (Sep 19 2010) - Mele20 - Sep. 24, 2010, 12:21 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Sep. 24, 2010, 06:07 PM
RE: Beta Config (Sep 19 2010) - Mele20 - Sep. 24, 2010, 11:11 PM
RE: Beta Config (Sep 19 2010) - eclipse - Sep. 24, 2010, 11:14 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Sep. 25, 2010, 01:10 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Sep. 25, 2010, 08:50 PM
RE: Beta Config (Sep 19 2010) - turtle - Sep. 26, 2010, 02:02 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Sep. 26, 2010, 02:20 PM
RE: Beta Config (Sep 19 2010) - turtle - Sep. 26, 2010, 03:10 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Sep. 26, 2010, 03:20 PM
RE: Beta Config (Sep 19 2010) - turtle - Sep. 26, 2010, 03:38 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Sep. 26, 2010, 08:48 PM
RE: Beta Config (Sep 19 2010) - turtle - Sep. 26, 2010, 10:37 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Sep. 29, 2010, 05:41 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 02, 2010, 03:30 PM
RE: Beta Config (Sep 19 2010) - whenever - Oct. 02, 2010, 03:59 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 02, 2010, 05:51 PM
RE: Beta Config (Sep 19 2010) - dave - Sep. 28, 2010, 10:27 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Sep. 29, 2010, 05:43 PM
RE: Beta Config (Sep 19 2010) - dave - Sep. 29, 2010, 11:12 PM
RE: Beta Config (Sep 19 2010) - JJoe - Sep. 30, 2010, 02:08 AM
RE: Beta Config (Sep 19 2010) - wammie - Sep. 29, 2010, 11:07 PM
RE: Beta Config (Sep 19 2010) - JJoe - Sep. 30, 2010, 02:15 AM
RE: Beta Config (Sep 19 2010) - wammie - Sep. 30, 2010, 03:39 AM
RE: Beta Config (Sep 19 2010) - JJoe - Sep. 30, 2010, 04:03 AM
RE: Beta Config (Sep 19 2010) - wammie - Sep. 30, 2010, 10:55 PM
RE: Beta Config (Sep 19 2010) - JJoe - Oct. 01, 2010, 01:55 AM
RE: Beta Config (Sep 19 2010) - wammie - Oct. 01, 2010, 03:03 AM
RE: Beta Config (Sep 19 2010) - JJoe - Oct. 01, 2010, 04:32 AM
RE: Beta Config (Sep 19 2010) - dave - Sep. 30, 2010, 04:20 AM
RE: Beta Config (Sep 19 2010) - JJoe - Sep. 30, 2010, 01:52 PM
RE: Beta Config (Sep 19 2010) - dave - Sep. 30, 2010, 09:25 PM
RE: Beta Config (Sep 19 2010) - JJoe - Oct. 01, 2010, 12:50 AM
RE: Beta Config (Sep 19 2010) - dave - Oct. 01, 2010, 02:35 AM
RE: Beta Config (Sep 19 2010) - ProxRocks - Oct. 01, 2010, 08:14 AM
RE: Beta Config (Sep 19 2010) - wammie - Oct. 01, 2010, 11:52 AM
RE: Beta Config (Sep 19 2010) - JJoe - Oct. 01, 2010, 03:24 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 01, 2010, 06:24 PM
RE: Beta Config (Sep 19 2010) - wammie - Oct. 01, 2010, 10:41 PM
RE: Beta Config (Sep 19 2010) - JJoe - Oct. 01, 2010, 11:14 PM
RE: Beta Config (Sep 19 2010) - ProxRocks - Oct. 01, 2010, 04:16 PM
RE: Beta Config (Sep 19 2010) - JJoe - Oct. 01, 2010, 10:05 PM
RE: Beta Config (Sep 19 2010) - ProxRocks - Oct. 02, 2010, 02:09 AM
RE: Beta Config (Sep 19 2010) - Kye-U - Oct. 01, 2010, 08:00 PM
RE: Beta Config (Sep 19 2010) - turtle - Oct. 01, 2010, 08:55 PM
RE: Beta Config (Sep 19 2010) - apacallyps - Oct. 08, 2010, 03:10 PM
RE: Beta Config (Sep 19 2010) - wammie - Oct. 09, 2010, 06:32 AM
RE: Beta Config (Sep 19 2010) - wammie - Oct. 02, 2010, 03:36 AM
RE: Beta Config (Sep 19 2010) - Kye-U - Oct. 02, 2010, 06:35 AM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 02, 2010, 10:57 AM
RE: Beta Config (Sep 19 2010) - wammie - Oct. 02, 2010, 04:07 PM
RE: Beta Config (Sep 19 2010) - JJoe - Oct. 02, 2010, 04:33 PM
RE: Beta Config (Sep 19 2010) - wammie - Oct. 02, 2010, 05:59 PM
RE: Beta Config (Sep 19 2010) - JJoe - Oct. 02, 2010, 07:15 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 02, 2010, 11:36 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 02, 2010, 05:54 PM
RE: Beta Config (Sep 19 2010) - wammie - Oct. 02, 2010, 10:27 PM
RE: Beta Config (Sep 19 2010) - JJoe - Oct. 03, 2010, 01:45 AM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 03, 2010, 02:20 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 03, 2010, 06:53 PM
RE: Beta Config (Sep 19 2010) - whenever - Oct. 09, 2010, 03:36 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 09, 2010, 04:10 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 09, 2010 04:15 PM
RE: Beta Config (Sep 19 2010) - whenever - Oct. 10, 2010, 06:35 AM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 10, 2010, 08:23 AM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 10, 2010, 02:28 PM
RE: Beta Config (Sep 19 2010) - ProxRocks - Oct. 10, 2010, 04:54 PM
RE: Beta Config (Sep 19 2010) - whenever - Oct. 10, 2010, 02:59 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 10, 2010, 04:13 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 10, 2010, 04:59 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 14, 2010, 06:20 PM
RE: Beta Config (Sep 19 2010) - wammie - Oct. 15, 2010, 04:55 AM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 15, 2010, 05:59 PM
RE: Beta Config (Sep 19 2010) - wammie - Oct. 15, 2010, 05:14 AM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 15, 2010, 06:01 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 17, 2010, 11:28 AM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 17, 2010, 05:15 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 19, 2010, 03:00 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 20, 2010, 04:30 PM
RE: Beta Config (Sep 19 2010) - sidki3003 - Oct. 23, 2010, 07:59 PM

Forum Jump: