- Add CGI hook to capture client IP during failed auth attempts - Add JavaScript hook to intercept ubus session.login failures - Add rpcd plugin for ubus-based auth logging - Update CrowdSec parser for case-insensitive matching - Inject JS hook into LuCI theme headers on install This enables CrowdSec to detect and block brute-force attacks on the LuCI web interface, which previously only logged successful authentications. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
16 lines
388 B
JSON
16 lines
388 B
JSON
{
|
|
"secubox-auth-logger": {
|
|
"description": "SecuBox Authentication Logger",
|
|
"read": {
|
|
"ubus": {
|
|
"secubox.auth-logger": ["log_failure", "get_client_info", "wrapped_login"]
|
|
}
|
|
},
|
|
"write": {
|
|
"ubus": {
|
|
"secubox.auth-logger": ["log_failure", "wrapped_login"]
|
|
}
|
|
}
|
|
}
|
|
}
|