Failed to include some sensitive path or file in #REQUEST-930-APPLICATION-ATTACK-LFI rules

_Issue originally created by user umarfarook882 on date 2017-06-17 21:14:30. Link to original issue: https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/814._

I have tested these payload on OWASP-CRS, It failed to block user form accessing this sensitive path or file. I have checked the rule on REQUEST-930-APPLICATION-ATTACK-LFI , these sensitive path or file are not included on the lfi-os-files.data file or on any other rules.

 #REQUEST-930-APPLICATION-ATTACK-LFI
 #PARANOIA_LEVEL:1
 #rule ID:930100,930110,930120,930130

These are the following sensitive file failed to detect by the OWASP-CRS
 /var/mail/www-data
 /etc/network/* i.e /etc/network/interfaces
 /etc/init/* i.e /etc/init/anacron.conf

For more information check my demo video on Github

[CRS-migration-bot]

User umarfarook882 commented on date 2017-06-27 06:52:30:

No, as far now we will add this below directories to lfi-os-files.data and close this issue.

var/mail/www-data
/etc/network/* 
/etc/init/*

[CRS-migration-bot]

User umarfarook882 commented on date 2017-08-07 04:54:51:

lifeforms Sure, Thanks for Merging the PR 😃 .