diff --git a/README.md b/README.md index 635228d..0f62f7e 100644 --- a/README.md +++ b/README.md @@ -138,11 +138,11 @@ Rack::Attack.blocklist('fail2ban pentesters') do |req| # so the request is blocked Rack::Attack::Fail2Ban.filter("pentesters-#{req.ip}", :maxretry => 3, :findtime => 10.minutes, :bantime => 5.minutes) do # The count for the IP is incremented if the return value is truthy - CGI.unescape(req.query_string) =~ %r{/etc/passwd} || + CGI.unescape(req.query_string) =~ %r{/etc/passwd} || req.path.include?('/etc/passwd') || - req.path.include?('wp-admin') || + req.path.include?('wp-admin') || req.path.include?('wp-login') - + end end ```