JShielder

JShielder JShielder Automated Hardening Script for Linux Servers JSHielder is an Open Source Bash Script developed to help SysAdmin and developers secure there Linux Servers in which they will be deploying any web application or services. This tool automates the process of installing all the...

coraza

Coraza - Web Application Firewall...

arya

Arya - The Reverse YARA Arya is a unique tool that produces pseudo-malicious files meant to trigger YARA rules. You can think of it like a reverse YARA because it does exactly the opposite - it creates files that matches your rules. You can read more about Arya and how it works in our blog. Intro...

gotestwaf

GoTestWAF GoTestWAF is a tool for API and OWASP attack simulation that supports a wide range of API protocols including REST, GraphQL, gRPC, SOAP, XMLRPC, and others. It was designed to evaluate web application security solutions, such as API security proxies, Web Application Firewalls, IPS, API...

web-threat-mitigation

web-threat-mitigation Hands-on lab on detecting and mitigating web app threats using OWASP ZAP, Burp Suite, and ModSecurity WAF with OWASP CRS. Case study: Spring4Shell CVE-2022-22965. Local Docker-based setup. Web Threat Mitigation Lab – OWASP ZAP, ModSecurity & CVE Exploitation This repository...

ftw

Framework for Testing WAFs FTW Purpose This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP...

coraza

Coraza - Брандмауэр веб-приложений...

ModSecurity

Libmodsecurity — один из компонентов проекта ModSecurity v3. Кодовая база библиотеки служит интерфейсом для коннекторов ModSecurity, принимающих веб-трафик и применяющих традиционную обработку ModSecurity. В целом, она предоставляет возможность загружать и интерпретировать правила, написанные в...

CRSprober

CRSprober 説明 このツールは、ModSecurity WAF が使用している OWASP Core Rule Set CRS のバージョンをリモートで検出します。また、CRS に設定されているパラノイアレベル PL も識別し、ローカルアクセスを必要とせずに WAF のセキュリティ態勢に関する洞察を提供します。 前提条件 Python 3 使い方 python crsprober.py http://example.com ライセンス Copyright c 2025 Jozef Sudolsky. All rights reserved. "THE BEER-WARE...

tf-log4j-aws-poc

Readme Project Description This project files demostrate a proof-of-concept of log4j vulnerability CVE-2021-44228 on AWS using Terraform Infrastructure-as-a-code means. There are 2 demo in this project: 1. single-instance contains a vulnerable server, you can use your personal computer to exploit...

Detection-and-Mitigation-script-for-CVE-2021-42717

Скрипт обнаружения и смягчения для CVE-2021-42717 Скрипт обнаружения и смягчения для CVE-2021-42717 - Уязвимость DoS в ModSecurity при парсинге JSON ModSecurity 3.x до 3.0.5 некорректно обрабатывает чрезмерно вложенные JSON-объекты. Специально созданные JSON-объекты с вложенностью в десятки тысяч...

owasp-modsecurity-crs

CRS migrated to a new 🏠 ! The OWASP ModSecurity Core Rule Set CRS has moved to https://github.com/coreruleset/coreruleset. A note on this change: This project started at Trustwave SpiderLabs over ten years ago, it was created with the idea of making a free ruleset that anyone can use to get start...

ftw

Framework for Testing WAFs FTW Purpose This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP...

modsecurity-cve-2018-6389

modsecurity-cve-2018-6389 A ModSecurity ruleset for detecting potential attacks using CVE-2018-6389. For more information, see https://www.rastating.com/protecting-wordpress-against-cve-2018-6389/...

modsecurity-backdoor

ModSecurity 백도어 설명 이것은 ModSecurity WAF 내부에서 실행되는 악성 소프트웨어의 개념 증명입니다. 이 소프트웨어는 두 가지 주요 기능을 가지고 있습니다: 파일 내용 가져오기. 명령 실행 및 출력 가져오기 원격 셸. 추가로, 다음 기능도 포함합니다: 탐지를 어렵게 하기 위한 제어 POST 인자 이름의 동적 설정. 탐지를 어렵게 하기 위한 로깅 비활성화 POST 인자 이름으로 식별되는 공격자 요청에만 해당. 다른 모든 규칙 비활성화 POST 인자 이름으로 식별되는 공격자 요청에만 해당. 전제 조건 Lua...

nginx-patch

nginx 1.15.x base image using debian-base nginx engine x is an HTTP and reverse proxy server, a mail proxy server, and a generic TCP proxy server. This custom nginx image contains: ngxdevelkit set-misc-nginx-module headers-more-nginx-module nginx-http-auth-digest ngxhttpsubstitutionsfiltermodule...

Drupal-Exploit-Lab

Drupal-Exploit-Lab Demonstration on exploitation on Drupal 7.57 CVE-2018-7600 with and without WAFWeb Application Firewall Description The project shows how the exploitation of Drupal 7.57 looks like in two different scenarios: 1. Unprotected server → successful exploitation with Metasploit and...

OPENSUSE-SU-2026:11632-1 owasp-modsecurity-crs-4.29.0-1.1 on GA media

These are all security issues fixed in the owasp-modsecurity-crs-4.29.0-1.1 package on the GA media of openSUSE Tumbleweed...

Astra Linux – Vulnerability in ModSecurity-Apache

ModSecurity is an open-source, cross-platform web application firewall WAF engine for Apache, IIS, and Nginx. In versions 2.9.11 and below, an attacker can override the HTTP response’s Content-Type, which can lead to various issues depending on the HTTP scenario. For example, we have demonstrated...

Astra Linux – Vulnerability in ModSecurity-Apache

ModSecurity is an open-source, cross-platform Web application firewall WAF engine for Apache, IIS, and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in a specific scenario: when the payload’s content type is application/json, and there is at least one rule that...