Hot answers tagged

4

If I had the means to automatically detect a 0-day exploit in a piece of software, the vendor of that software has the same potential, thus these exploits would be caught before the software was ever released. Such things are done, of course, and they are called Source Code Analysis. They do exactly what you are trying to do: Automatically look for ...


1

There are likely many tools and custom scripts out there that accomplish what you are trying to do. However, I think fail2ban is a good example. It ships with profiles "apache-badbots", "apache-noscript", and others that that will follow your logs and temporarily ban anyone who is in violation of the rules, e.g. trying to access .php pages on a NodeJS server....


Only top voted, non community-wiki answers of a minimum length are eligible