ftw

Framework for Testing WAFs FTW Purpose This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP...

coraza

Coraza - Web Application Firewall...

Drupal-Exploit-Lab

Drupal-Exploit-Lab Demostración de la explotación de Drupal 7.57 CVE-2018-7600 con y sin WAF Firewall de Aplicaciones Web Descripción El proyecto muestra cómo se ve la explotación de Drupal 7.57 en dos escenarios diferentes: 1. Servidor sin protección → explotación exitosa con Metasploit y...

tf-log4j-aws-poc

Readme Descripción del proyecto Estos archivos del proyecto demuestran una prueba de concepto de la vulnerabilidad log4j CVE-2021-44228 en AWS utilizando Terraform como infraestructura como código. Hay 2 demostraciones en este proyecto: 1. single-instance contiene un servidor vulnerable; puedes...

CRSprober

CRSprober Description This tool remotely detects the version of the OWASP Core Rule Set CRS used by a ModSecurity WAF. It also identifies the configured paranoia level PL of the CRS, providing insights into the WAF's security posture without requiring local access. Prerequisities Python 3 Usage...

JShielder

JShielder JShielder Automated Hardening Script for Linux Servers JSHielder is an Open Source Bash Script developed to help SysAdmin and developers secure there Linux Servers in which they will be deploying any web application or services. This tool automates the process of installing all the...

coraza

Coraza - Cortafuegos de Aplicaciones Web...

arya

Arya - The Reverse YARA Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA because it does exactly the opposite - it creates files that matches your rules. You can read more about Arya and how it works in our blog. Intro...

ModSecurity

Libmodsecurity es uno de los componentes del proyecto ModSecurity v3. El código base de la biblioteca sirve como interfaz para los conectores de ModSecurity, que reciben tráfico web y aplican el procesamiento tradicional de ModSecurity. En general, proporciona la capacidad de cargar/interpretar...

gotestwaf

GoTestWAF GoTestWAF is a tool for API and OWASP attack simulation that supports a wide range of API protocols including REST, GraphQL, gRPC, SOAP, XMLRPC, and others. It was designed to evaluate web application security solutions, such as API security proxies, Web Application Firewalls, IPS, API...

web-threat-mitigation

web-threat-mitigation Laboratorio práctico sobre detección y mitigación de amenazas web utilizando OWASP ZAP, Burp Suite y ModSecurity WAF con OWASP CRS. Caso de estudio: Spring4Shell CVE-2022-22965. Configuración local basada en Docker. Laboratorio de Mitigación de Amenazas Web – OWASP ZAP,...

Detection-and-Mitigation-script-for-CVE-2021-42717

Script de detección y mitigación para CVE-2021-42717 Script de detección y mitigación para CVE-2021-42717 - Vulnerabilidad DoS de ModSecurity en el análisis de JSON ModSecurity 3.x hasta 3.0.5 maneja incorrectamente objetos JSON excesivamente anidados. Objetos JSON diseñados con anidamiento de...

owasp-modsecurity-crs

CRS migrated to a new 🏠 ! The OWASP ModSecurity Core Rule Set CRS has moved to https://github.com/coreruleset/coreruleset. A note on this change: This project started at Trustwave SpiderLabs over ten years ago, it was created with the idea of making a free ruleset that anyone can use to get start...

ftw

Framework for Testing WAFs FTW Purpose This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP...

modsecurity-cve-2018-6389

modsecurity-cve-2018-6389 Un conjunto de reglas de ModSecurity para detectar posibles ataques mediante CVE-2018-6389. Para obtener más información, consulte https://www.rastating.com/protecting-wordpress-against-cve-2018-6389/...

modsecurity-backdoor

Puerta Trasera de ModSecurity Descripción Esta es una prueba de concepto de un software malicioso que se ejecuta dentro del WAF ModSecurity. El software tiene dos funciones principales: Obtener el contenido de archivos. Ejecutar comandos y obtener su salida shell remota. Además, incluye estas...

nginx-patch

Imagen base nginx 1.15.x usando debian-base nginx engine x es un servidor HTTP y proxy inverso, un servidor proxy de correo y un servidor proxy TCP genérico. Esta imagen personalizada de nginx contiene: ngxdevelkit set-misc-nginx-module headers-more-nginx-module nginx-http-auth-digest...

OPENSUSE-SU-2026:11632-1 owasp-modsecurity-crs-4.29.0-1.1 on GA media

These are all security issues fixed in the owasp-modsecurity-crs-4.29.0-1.1 package on the GA media of openSUSE Tumbleweed...

Astra Linux – Vulnerability in ModSecurity-Apache

ModSecurity is an open-source, cross-platform web application firewall WAF engine for Apache, IIS, and Nginx. In versions 2.9.11 and below, an attacker can override the HTTP response’s Content-Type, which can lead to various issues depending on the HTTP scenario. For example, we have demonstrated...

Astra Linux – Vulnerability in ModSecurity-Apache

ModSecurity is an open-source, cross-platform Web Application Firewall WAF engine for Apache, IIS, and Nginx. Versions prior to 2.9.10 contain a denial-of-service vulnerability similar to GHSA-859r-vvv8-rm8r/CVE-2025-47947. The sanitiseArg and sanitizeArg – it’s the same action, just a alias...