I observed that the excluding config can whitelist certain folders/files but I wonder how to whitelist the MD5/SHA1/SHA256 instead of the file?
This could be very useful for web server scanning, especially files are most likely identical but false alarm raised due to syntax or function calls. The hash whitelist would be helpful for checking if the files are being modified or not.
I observed that the excluding config can whitelist certain folders/files but I wonder how to whitelist the MD5/SHA1/SHA256 instead of the file?
This could be very useful for web server scanning, especially files are most likely identical but false alarm raised due to syntax or function calls. The hash whitelist would be helpful for checking if the files are being modified or not.