Once you spend time crafting the perfect color scheme, you don't want to lose it.
| Pattern | Highlight Color | Purpose |
|---------|----------------|---------|
| \b(curl|wget|nc|ncat|bash -i|sh -i)\b | 🔴 Red + Bold | Reverse shell / downloader |
| (failed|denied|invalid|unauthorized) | 🟡 Yellow | Auth failures |
| (root|admin|sudo|su) followed by (accepted|logged) | 🟢 Green + Bold | Privileged access success |
| (SELECT.*FROM|DROP TABLE|INSERT INTO) | 🟣 Magenta | SQL injection in logs |
| (\.\./|\%2e\%2e/) | 🔵 Cyan | Path traversal attempt |
| (passwd|shadow|\.ssh|\.bashrc) | 🟠 Orange | Sensitive file access |
| (\d1,3\.)3\d1,3 | 🟡 Dim yellow | IP addresses (less intrusive) |
| (chmod 777|chmod 666) | 🔴 Red + Underline | Dangerous permissions | xshell highlight sets
| Component | Description | |-----------|-------------| | Name | Identifier for the set (e.g., “Log Analysis”, “Error Highlights”) | | Rules | List of patterns/words to match, each with its own color/style | | Case sensitivity | Can be enabled per rule | | Regular expressions | Supported for advanced matching | Once you spend time crafting the perfect color
Go to Connection > SSH > Terminal for your specific session. Under "Highlight Sets," select the set you just created. Go to Connection > SSH > Terminal for
Create a rule with Text Color = Background Color (e.g., black-on-black) to effectively hide lines containing DEBUG or VERBOSE. Not a true filter, but works visually.
To configure Highlight Sets in Xshell: