ModSecurity

ModSecurity is an Open Source web application firewall developed by Trustwave's SpiderLabs.

[ModSecurity @ModSecurity]

"How big is too big" - a new blog post has been published on https://t.co/UZppADooLA - enjoy reading!

https://t.co/eV2AAlu9MD

[ModSecurity @ModSecurity]

@HackerVault Probably there is a typo here (see the image): there is no such operator ">=". Perhaps you though "@gt".

[Core Rule Set @CoreRuleSet]

CRS will have its second community call on September 22, from 20:30 to 21:30 CEST (18:30 UTC / 2:30 p.m. ET) and will be moderated by former CRS co-leader Christian Folini. Check more details and register here: https://t.co/uN4E3Z2jZt

[ModSecurity @ModSecurity]

@rad_tech_mx Yes 🙂

[ModSecurity @ModSecurity]

A new version of mod_security2 has been released, please check the blog post:

https://t.co/RBFCgp9pnP

[ModSecurity @ModSecurity]

A new version of mod_security2 has been released, please check the blog post:
https://t.co/1GKmk90r0P

[ModSecurity @ModSecurity]

@idr00t We don't know how old is this article, but please update it. There is a much newer version than 2.9.7 (2.9.10 is the last release).

[ModSecurity @ModSecurity]

@_0b1d1 With CRS, ModSecurity catches this attack on PL1.

$ curl -X POST -d 'q=<a href="jav%0Dascript:alert(1)">' -H "x-format-output: txt-matched-rules" https://t.co/Ga2IypASE4

Output:
941390 PL1 Javascript method detected
949110 PL1 Inbound Anomaly ...
980170 PL1 Anomaly Sco...

[ModSecurity @ModSecurity]

@iototsecnews "No Patch" - you misinform your users. The patch was applied earlier than the advisory was published. Please take a look at our GH page.

[ModSecurity @ModSecurity]

New version of mod_security2 have been released:  https://t.co/cvh5CPrarO

This versions includes a fix against a recently discovered (another) DoS vulnerability: https://t.co/ydrpsiaueT

Please upgrade your module!

[ModSecurity @ModSecurity]

@cayahuanca_ Why is difficult? Feel free to ask on Github or on Slack: https://t.co/Dc6NV5KE8M, channel "project-modsecurity"

[ModSecurity @ModSecurity]

New version has been released:

Nginx connector: https://t.co/hsM6awcWZU

blog post: https://t.co/u0CGF2zIpH

Please note that the log format has been changed!

[ModSecurity @ModSecurity]

New version have been released:

mod_security2:  https://t.co/asuFfnCQ8H

This versions includes a fix against a recently discovered DoS vulnerability: https://t.co/Em4UFvWFZB

Please upgrade your module!

[ModSecurity @ModSecurity]

Happy to announce OWASP Open WAF Day: https://t.co/PwTtJT4iJ3

Feel free to register yourself!
#modsecurity #coreruleset #crs #coraza #waf

[ModSecurity @ModSecurity]

Please take a look at this issue and share your opinions (on GH):

https://t.co/4cMkr9Qls3

[ModSecurity @ModSecurity]

@cjihrig There are several ways.
- join to our Slack community: https://t.co/Dc6NV5KE8M, check "# project-modsecurity" channel
- send any pull request on GH
- you can reach us in e-mail: modsecurity at owasp dot org

[ModSecurity @ModSecurity]

@cjihrig @attilah No, it's not "ported". Probably you meant Coraza, but that was written completely from scratch.

[EasyDCIM @EasyDCIM]

Running smooth is great, but running secure is essential. #EasyDCIM v1.15.0 now supports #ModSecurity on #Debian-based systems, giving you a critical edge against evolving cybersecurity risks.

See how else our platform helps you outpace threats: https://t.co/KkAUQhUTWj #Firewall

[ModSecurity @ModSecurity]

Please update your libmodsecurity3 instances as soon as possible:

https://t.co/xx5utDm5eE