JShielder

JShielder JShielder Automated Hardening Script for Linux Servers JSHielder is an Open Source Bash Script developed to help SysAdmin and developers secure there Linux Servers in which they will be deploying any web application or services. This tool automates the process of installing all the...

coraza

Coraza - Web Application Firewall Coraza is an open source, enterprise-grade, high performance Web Application Firewall WAF ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set v4. Website:...

gotestwaf

GoTestWAF GoTestWAF is a tool for API and OWASP attack simulation that supports a wide range of API protocols including REST, GraphQL, gRPC, SOAP, XMLRPC, and others. It was designed to evaluate web application security solutions, such as API security proxies, Web Application Firewalls, IPS, API...

ftw

Framework for Testing WAFs FTW Purpose This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP...

coraza

Coraza - Pare-feu applicatif Web Coraza est un pare-feu applicatif Web WAF open source, de qualité professionnelle et haute performance, prêt à protéger vos applications bien-aimées. Il est écrit en Go, prend en charge les ensembles de règles SecLang de ModSecurity et est compatible à 100 % avec...

ModSecurity

Libmodsecurity는 ModSecurity v3 프로젝트의 한 구성 요소입니다. 이 라이브러리 코드베이스는 웹 트래픽을 수신하고 기존 ModSecurity 처리를 적용하는 ModSecurity 커넥터에 대한 인터페이스 역할을 합니다. 일반적으로 ModSecurity SecRules 형식으로 작성된 규칙을 로드/해석하고 커넥터를 통해 애플리케이션에서 제공하는 HTTP 콘텐츠에 적용하는 기능을 제공합니다. Apache용 ModSecurity일명 ModSecurity v2.x를 찾고 있다면, 해당 버전은 여전히 유지관리되며...

arya

Arya - The Reverse YARA Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA because it does exactly the opposite - it creates files that matches your rules. You can read more about Arya and how it works in our blog. Intro...

web-threat-mitigation

web-threat-mitigation Hands-on lab on detecting and mitigating web app threats using OWASP ZAP, Burp Suite, and ModSecurity WAF with OWASP CRS. Case study: Spring4Shell CVE-2022-22965. Local Docker-based setup. Web Threat Mitigation Lab – OWASP ZAP, ModSecurity & CVE Exploitation This repository...

Detection-and-Mitigation-script-for-CVE-2021-42717

Скрипт обнаружения и смягчения для CVE-2021-42717 Скрипт обнаружения и смягчения для CVE-2021-42717 - Уязвимость DoS в ModSecurity при парсинге JSON ModSecurity 3.x до 3.0.5 некорректно обрабатывает чрезмерно вложенные JSON-объекты. Специально созданные JSON-объекты с вложенностью в десятки тысяч...

tf-log4j-aws-poc

Lisez-moi Description du projet Ces fichiers de projet démontrent une preuve de concept de la vulnérabilité log4j CVE-2021-44228 sur AWS en utilisant Terraform Infrastructure-as-a-Code. Il y a 2 démos dans ce projet : 1. single-instance contient un serveur vulnérable, vous pouvez utiliser votre...

owasp-modsecurity-crs

CRS migrated to a new 🏠 ! The OWASP ModSecurity Core Rule Set CRS has moved to https://github.com/coreruleset/coreruleset. A note on this change: This project started at Trustwave SpiderLabs over ten years ago, it was created with the idea of making a free ruleset that anyone can use to get start...

ftw

Framework for Testing WAFs FTW Purpose This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP...

modsecurity-cve-2018-6389

modsecurity-cve-2018-6389 A ModSecurity ruleset for detecting potential attacks using CVE-2018-6389. For more information, see https://www.rastating.com/protecting-wordpress-against-cve-2018-6389/...

modsecurity-backdoor

Бэкдор ModSecurity Описание Это доказательство концепции вредоносного ПО, работающего внутри ModSecurity WAF. Программное обеспечение имеет две основные функции: Получение содержимого файлов. Выполнение команд и получение вывода удалённая оболочка. Дополнительно оно включает следующие функции:...

Linux Distros Unpatched Vulnerability : CVE-2026-61813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - modsecurity - None modsecurity-apache - None Ubuntu Linux - GHSA-2vqc-36qp-ccmw: Weak libcurl TLS hostname verification setting when fetching ove...

Linux Distros Unpatched Vulnerability : CVE-2026-61812

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - modsecurity - None modsecurity-apache - None Ubuntu Linux - GHSA-cxqf-vgrr-xxrv: HTML decoder missing entities, leading to evasion CVE-2026-61812...

Linux Distros Unpatched Vulnerability : CVE-2026-73856

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - modsecurity - None Ubuntu Linux - GHSA-vmg8-j66p-vgvw: Response body inspection bypass via non-canonical Content-Type casing CVE-2026-73856 Note...

Linux Distros Unpatched Vulnerability : CVE-2026-73857

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - modsecurity - None Ubuntu Linux - GHSA-jx3r-phvx-2jmj: XML request body processor dereferences an uninitialized parser context pointer...

nginx-patch

nginx 1.15.x base image using debian-base nginx engine x is an HTTP and reverse proxy server, a mail proxy server, and a generic TCP proxy server. This custom nginx image contains: ngxdevelkit set-misc-nginx-module headers-more-nginx-module nginx-http-auth-digest ngxhttpsubstitutionsfiltermodule...

CRSprober

CRSprober Description Cet outil détecte à distance la version de l'OWASP Core Rule Set CRS utilisé par un WAF ModSecurity. Il identifie également le niveau de paranoïa PL configuré du CRS, fournissant des informations sur la posture de sécurité du WAF sans nécessiter un accès local. Prérequis...