Collaborate Disseminate
The CRS Rule 200000 seems to hit and I didn’t found the exact problem yet.
Versions:
owasp-modsecurity-crs-3.2.0
Apache/2.4.38
The Log looks like this:
[30/Mar/2021:14:28:57 +0200] YGMZiY3fnzEmfTyS-ahEbwAAAA8 secretIP 31385 secretIP 443
… Continue reading Mod Security: Multipart XML fails with Message: "XML parser error: XML: Failed parsing document."
Is there a place I can view modsec rules?
Trying to save some javascipt & html code through elementor on wordpress triggered some modsec rule- specifically: [file "/etc/apache2/conf.d/modsec/modsec/11_asl_adv_rules.conf"] [li… Continue reading regexp of a modsec rule
i’m using https://hub.docker.com/r/owasp/modsecurity + https://github.com/coreruleset/modsecurity-docker
Now in POST Request When user copy and paste text from ms word and send to server, the request will be blocked
Log Example
Feb 16 13:… Continue reading mod_security coreruleset: Block Request when Copy Text From MS Word Format
I have installed ModSecurity in Apache server and using it as a reverse proxy to forward request to a NodeJS applicaiton.
I have followed this tutorial to configure ModSecurity in Apache, https://www.atlantic.net/vps-hosting/securing-your-… Continue reading ModSecurity – XSS not blocked when #/ (hash) is added in the url by NodeJS application
I’m writing a rule for modsecurity 2.x to match an IP address to those in a file.
SecRule REMOTE_ADDR "@ipMatchFromFile /etc/modsecurity/address_list.txt"
I understand how this works, I’m just wondering if anyone knows when mod… Continue reading Can modsecurity 2.x read data from a text file that has been updated?
On my WordPress websites (on LEMP stack with Nginx) I normally install a WAF plugin such as Ninja Firewall or Wordfence.
I was wondering if a better practice would be to replace them with a host-based WAF like mod-security (I guess that ru… Continue reading Mod-security and WordPress WAF
On my WordPress websites (on LEMP stack with Nginx) I normally install a WAF plugin such as Ninja Firewall or Wordfence.
I was wondering if a better practice would be to replace them with a host-based WAF like mod-security (I guess that ru… Continue reading Mod-security and WordPress WAF
I am testing web application firewall and I have installed ModSecurity 2.9 runs Core ModSecurity Rule Set ver.2.2.9 and to test on Web application I also install DVWA Platform: Windows
and trying to do Command Inject and it allows even… Continue reading ModSecurity Command Injection not working
I have a fresh installation of CentOS 8. I installed Apache 2.4.37 from the repo. Then installed the latest ModSecurity:
dnf install mod_security -y
Checked the installation
dnf info mod_security
Result:
Name : mod_security
Versi… Continue reading ModSecurity won’t apply rules – no error log entries [migrated]
I’ve this error:
ModSecurity: Warning. Matched "Operator `PmFromFile’ with parameter `lfi-os-files.data’ against variable `ARGS:scope’ (Value: `email profile https://www.googleapis.com/auth/userinfo.profile https://www.googleapis.com/… Continue reading How to exclude rule 930120 for google oauth