From 2ff4b78dbb313c4aaea0ff0be6556f80010d6c26 Mon Sep 17 00:00:00 2001
From: Wyc0 <wuyc@knownsec.com>
Date: Wed, 18 Nov 2015 12:31:40 +0800
Subject: [PATCH] enhance recognition of "baiduyun" in waf/baidu.py
---
waf/baidu.py | 1 +
1 file changed, 1 insertion(+)
diff --git a/waf/baidu.py b/waf/baidu.py
index 7a15feadb..27f1f21ca 100644
--- a/waf/baidu.py
+++ b/waf/baidu.py
@@ -17,6 +17,7 @@ def detect(get_page):
for vector in WAF_ATTACK_VECTORS:
page, headers, code = get_page(get=vector)
retval = re.search(r"fhl", headers.get("X-Server", ""), re.I) is not None
+ retval |= re.search(r"yunjiasu-nginx", headers.get("server"), re.I) is not None
if retval:
break