3 Commits

Author	SHA1	Message	Date
CyberMind-FR	e58f479cd4	feat(waf): Update WAF scenarios with 2024-2025 CVEs and OWASP threats ... Add detection patterns for latest actively exploited vulnerabilities: - CVE-2025-55182 (React2Shell, CVSS 10.0) - CVE-2025-8110 (Gogs RCE), CVE-2025-53770 (SharePoint) - CVE-2025-52691 (SmarterMail), CVE-2025-40551 (SolarWinds) - CVE-2024-47575 (FortiManager), CVE-2024-21887 (Ivanti) - CVE-2024-3400, CVE-2024-0012, CVE-2024-9474 (PAN-OS) New attack categories based on OWASP Top 10 2025: - HTTP Request Smuggling (TE.CL/CL.TE conflicts) - AI/LLM Prompt Injection (ChatML, instruction markers) - WAF Bypass techniques (Unicode normalization, double encoding) - Supply Chain attacks (CI/CD poisoning, dependency confusion) - Extended SSTI (Jinja2, Freemarker, Velocity, Thymeleaf) - API Abuse (BOLA/IDOR, mass assignment) CrowdSec scenarios split into 11 separate files for reliability. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-12 05:02:57 +01:00
CyberMind-FR	21f59b6c9a	fix(crowdsec): Restore working setup page from settings.js ... Restored the original settings.js functionality as setup.js with updated nav references. The simplified version was broken. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-02 11:01:16 +01:00
CyberMind-FR	6298e8b961	refactor(crowdsec): Simplify LuCI interface - KISS setup ... - Remove unused views: metrics.js, waf.js, wizard.js - Remove unused CSS: wizard.css, soc.css - Remove settings.js, replace with simplified setup.js - Update menu: remove WAF, Metrics entries - Update nav.js: remove references to deleted pages - Add status grid CSS for setup page The new Setup page provides: - System status overview (Agent, LAPI, CAPI, Bouncer) - Console enrollment form - Service controls (start/stop/restart/repair) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-02 10:56:13 +01:00