Latest posts tagged with #modsecurity on Bluesky
🔥 OWASP CRS is evolving! Introducing #CRSLang — a new YAML-based rule language replacing Seclang. Cleaner syntax, multi-engine support, bidirectional translation, and a lower barrier for new contributors.
Check it out 👉 coreruleset.org/2026...
#WAF #AppSec #OWASP #ModSecurity
#ModSecurity / @owasp.org CRS engine puzzle!
A solution has the potential to improve the performance across millions of servers.
A primary concern for Windhawk mods is security. Users question malware risk. Solutions include available source code for review, reputable mod authors, and small mod sizes making audits easier. Transparency is crucial for trust. #ModSecurity 2/6
Installer et configurer ModSecurity (le WAF de l'OWASP) et bloquer efficacement les attaques (XSS, injection SQL, etc.).
#nginx #ModSecurity #WAF #SécuritéWeb #Linux #Tuto #CultureLinux
Semi-related: OWASP maintains a list of ModSecurity exceptions for nextcloud here:
github.com/coreruleset/nextcloud-ru...
#nextcloud #nginx #WAF #webapplicationfirewall #modSecurity
I no longer rely on Jetpack Protect. Instead, I’ve built a lean, hardened WordPress security stack using mod_security, Fail2Ban, WPScan, and a few carefully configured rules. No black boxes. No bloat. Just tools I trust.
#WordPress #Infosec #SelfHosting #WebSecurity #JetpackProtect #Fail2Ban […]
NGINX WAF Alternatives: App Protect vs. ModSecurity vs. SafeLine WAF Web application firewalls (WAFs) are crucial for protecting web services against attacks such as SQL injection, XSS, and DDoS. ...
#modsecurity #nginx #website #safeline-waf
Origin | Interest | Match
Mr. Full Stack, at your service: "Amazing work, Brian. I really appreciate it. Everything works fine now." #ModSecurity
Plus you can enable and customize the OWASP Core Ruleset, which you can also enable on your server via #Modsecurity. All that said, a WordPress security plugin is still useful. For example, you can add any ips blocked by the plugin into an IP Access rule in any Cloudflare plan, including free.
Wenn der $kunde nach ner WAF (Web Application Firewall) fragt, man #modsecurity im Einsatz hat und zusätzlich noch regelmäßige Security Scans mit #OpenVAS durchführt, dann antwortet der $kunde auch mal "toll 😊 Danke für die schnelle Reaktion und fundierte Antwort". Dieses Gefühl: unbezahlbar 🧡🧡
I'm not saying a #WAF isn't essential, but looking at the #ModSecurity logs, I have to say: #Magento is a really robust #eCommerce solution, hardened against many attack vectors. It's impressive to see how much it blocks out of the box.
Exciting update coming soon for our #Magento2 #Helm Chart! v2.8 will include #OWASP CRS integration for Magento2, enhancing security with #ModSecurity.
We’d love your feedback! Test it out & help us fine-tune the #OWASP rules for Magento2. 🔧🔥
github.com/PHOENIX-MEDI...
Une petite ligne dans modsecurity qui change tout:
SecRule REQUEST_HEADERS:User-Agent "@pmFromFile /etc/modsecurity/customrules/badbots-user-agents.txt" \
"id:2000200,phase:1,deny,status:403,log,msg:'Bad Bot Detected: %{MATCHED_VAR}'"
#modsecurity #badbots #apache
Tuning #OWASP CSR for #Magento2. Already have a collection of conflicting rules: github.com/PHOENIX-MEDI...
Anyone experienced with #ModSecurity and #OWASP rules and can share knowledge?
Kicking off a new development cycle for our #Magento2 #Helm chart by updating sub-charts: github.com/PHOENIX-MEDI....
Already fixed an annoying issue with cron job pod shutdowns.
Now working on integrating #ModSecurity with #OWASP CRS for #WAF capabilities.
Want to contribute or have feature ideas?
🚀 Proud to release the first version of our #ModSecurity #Helm chart! This Helm chart deploys ModSecurity with the official #OWASP Core Rule Set (CRS) Docker container allowing users to integrate a Web Application Firewall (WAF) into their infrastructure.
github.com/PHOENIX-MEDI...
Next-Gen Web Application #Firewall BunkerWeb: Security Simplified 🛡️ #DevOps
🔒 Full-featured web server built on #NGINX offering security by default
🛡️ Core features: #WAF with #ModSecurity, OWASP Core Rule Set, auto HTTPS/Let's Encrypt
🧵 ↓
I always saw teaching at the famous German #Linuxhotel as peak teaching experience.
At last, I'm here, having a great time with six students eager to learn about #ModSecurity / OWASP CRS with the November rain being the only downside.
Here is a photo from a better season.
Übeltäter gefunden, das aktuelle #WooCommerce #Update verursacht das #WAF von #modsecurity eingreift developer.woo.com/2024/01/16/w... #wordpress
Immer wieder etwas neues, plötzlich ist eine #Website nicht mehr aufrufbar ... nach und nach ergibt sich, das #modsecurity Amok läuft 🤪
