cxs

Changes:

• Fixed problem where dir: ignores where not being fully implemented in single file scans
• Fixed problem where dir: and hdir: ignores where not being fully implemented by the cxs Watch daemon when auto-reloading an ignore file
• Exploit fingerprint definitions database additions

Changes:

• Developed another new advanced PHP decoder for –decode ([D])
• Fixed advanced decoder output formatting when using –decode [file]
• Exploit regex definitions database additions
• Exploit fingerprint definitions database additions

Changes:

• Modifications to cxs Watch daemon so that it no longer needs to completely restart if changes to –xtra [file] are detected
• Added detection and decoding of Hex encoding to advanced PHP decoders
• Exploit fingerprint definitions database additions

Changes:

• Memory management and speedup improvements for cxs Watch Daemon
• Improvements to advanced PHP decoders to –decode ([D])
• Corrected cxs POD to read –upgrade instead of –update
• Exploit regex definitions database additions
• Exploit fingerprint definitions database additions

Changes:

• Added more advanced PHP decoders to –decode ([D])
• Exploit regex definitions database additions
• Exploit fingerprint definitions database additions

Changes:

• cxs Watch – report error if unable to increase /proc/sys/fs/inotify/max_user_watches
• Further improvements to –timemax [secs] reports
• Further improvements to error reporting during scans
• Exploit fingerprint definitions database additions

Changes:

• cxs Watch will now restart if a change to a specific –xtra [file] is made. This triggers a full restart of cxs Watch
• Improvements to –timemax [secs]
• Improvements to error reporting during scans
• Added more advanced PHP decoders to –decode ([D])
• Exploit regex definitions database additions
• Exploit fingerprint definitions database additions

Changes:

• Added new option –timemax [secs]. Scan timeout per file in seconds to prevent looping. Default is 30 seconds
• Additional logging on cxs watch startup to show the progress of user account inotify setup
• Exploit regex definitions database additions
• Exploit fingerprint definitions database additions

Changes:

• Modifications to the UI
• Updates to the failure detection of the quarantine procedure
• New option –force. If –force is not used then cxs will refuse to scan within restricted directories: /usr /var /bin /lib /lib64 /boot
• Modified daily update check to only restart cxs Watch if updates are actually new
• Modified cxs Watch to no longer require a /scripts/postwwwacct entry (which is now ignored) as it now monitors /var/cpanel/users/ for new users on cPanel servers
• Exploit fingerprint definitions database additions

Changes:

• Redesigned cxs UI, included functions for controlling cxs Watch
• Added TERM logging to the cxs Watch daemon to signify termination