Forum Discussion

Dmitri_Ch__1425's avatar
Jun 23, 2014

iRule to block DirBuster ?

Hi,

 

Is there an iRule to stop DirBuster from scanning my web servers (nodes)? https://www.owasp.org/index.php/Category:OWASP_DirBuster_Project.

 

I did quick search for DirBuster on this site and on support.f5.com and didn't find anything related to DirBuster.

 

Thank you.

 

2 Replies

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus

    My only thought is blocking the dirbuster user agent using an irule, however, I understand the tool does allow you to modify the user agent. Perhaps there's a generic web scraping irule in the DC codeshare that might help.

     

    N

     

  • Thank you. I'll try following iRule for this task.

     

    when HTTP_REQUEST { if { [HTTP::header "User-Agent"] starts_with "DirBuster" } { drop return } }