cPanel

Changes:

• Fixed problem with cxs Watch daemon restart introduced in v2.2.27. You will have to manually restart any running cxs Watch daemon after this upgrade
• If BSD::Resource perl module is installed, double the configured process stack size to help avoid Segmentation Faults
• Exploit regex definitions database additions
• Exploit fingerprint definitions database additions

Changes:

• New –options [P]. This option will search standard web application configuration files for MySQL database passwords. It will then attempt to login via FTP on localhost with the username of the account being processed and the detected password (it will attempt up to two password hits per configuration file). If the login is successful, the option will trigger a match. See CLI documentation for more info
• Separated and highlighted advanced Exploit Scan options in the UI that can affect user data and/or produce false-positives in the vain hope it will stop some people just ticking everything and then wondering where their files have gone
• Added Net::FTP to the perl module requirements (this is a core perl module so should already be installed)
• New options –uidmin [uid] and –uidmax [uid] for the GENERIC install when used with –allusers. These have no effect on cPanel and DA
• Exploit regex definitions database additions
• Exploit fingerprint definitions database additions

Changes:

• Added new option for –xtra [file]: regfile: which is a regular expression match for a file or directory name
• Added new CLI option –smtp. This will send emails generated by –mail [email] via localhost SMTP instead of sendmail
• Added MIME::Base64 and Net::SMTP to the perl module requirements (both are core perl modules so should already be installed)

Changes:

• Fix for UI version processing issue

Changes:

• Allow binary submissions via –wttw
• Improvements to –decode ([D]) option
• Exploit regex definitions database additions
• Exploit fingerprint definitions database additions

Changes:

• Improved cxs Watch daemon scanning to include moved files to detect files uploaded by the cPanel File Manager
• Fixed bug where –cleanlog [file] was not logging the filename for cxsftp.sh scanning
• Exploit regex definitions database additions
• Exploit fingerprint definitions database additions

Changes:

• Exploit regex definitions database correction

Changes:

• Speedups to –decode ([D]) option
• Improvements to decode regex
• Exploit regex definitions database additions
• Exploit fingerprint definitions database additions