Core Rule Set retweeted
New versions of ModSecurity have been released, see the blog post:
modsecurity.org/20240903/new…
Core Rule Set retweeted
This is a bit of a portrait of the #OWASP #WAF projects I am co-leading.
Translation should be easy if you do not read German.
CC @coreruleset, @ModSecurity
Seit Anfang Jahr verwaltet @owasp die "Web Application Firewall"-Engine, welche unter anderem das #Evoting-System der @swisspost schützt. Wir haben uns mit dem Verantwortlichen, @ChrFolini, unterhalten.
inside-it.ch/open-source-fir…
Core Rule Set retweeted
We should have a realtime @coreruleset pew pew map!
Everytime a CRS rule triggers globally, there should be a visual trace on the map.
Core Rule Set retweeted
📣 Traefik Labs Joins @OWASP and Integrates @corazaio and Core Rule Set Projects
Read the Press Release here: hubs.ly/Q02p_Cdl0
Core Rule Set retweeted
#OWASP CRS v4.0 is out !🚀 new features include new plugin architecture and early blocking:
Core Rule Set retweeted
CRS4 is out from RC to stable release. Great stuff @CoreRuleSet
Let CRS4 be your valentine!
The @OWASP CRS / @CoreRuleSet team is proud to release CRS 4.0.
Years in the making, it brings your WAF the best detection ever and a new plugin architecture.
Read more at coreruleset.org/20240214/let…
#CRS4 #CRS3 #WAF
no more #WAFBypass
#bugbountytips
Core Rule Set retweeted
Let CRS be your valentine! CRS4 is out!
Let CRS4 be your valentine!
The @OWASP CRS / @CoreRuleSet team is proud to release CRS 4.0.
Years in the making, it brings your WAF the best detection ever and a new plugin architecture.
Read more at coreruleset.org/20240214/let…
#CRS4 #CRS3 #WAF
no more #WAFBypass
#bugbountytips
Core Rule Set retweeted
The new #OWASP @ModSecurity team is happy to report that we successfully published libModSecurity 3.0.12. The first release done by the new organization.
This is a fix for #CVE 2024-1019.
Details and all the links at
owasp.org/www-project-modsec…
Core Rule Set retweeted
This is exciting news! I worked on the @ModSecurity and @CoreRuleSet for over a decade at Breach Security and then @SpiderLabs and lead the effort to move the CRS to @owasp. By moving the ModSecurity engine to OWASP it will truly unlock its development. Outstanding 👍
After serving as its steward for over a decade, @Trustwave has agreed to transfer the reins of the renowned open-source web application firewall (WAF) engine, ModSecurity, to the Open Worldwide Application Security Project (OWASP). Read more at owasp.org/blog/2024/01/09/Mo…
Core Rule Set retweeted
.@ModSecurity is becoming an @OWASP project!
After years in limbo, @Trustwave just announced the transition.
This is to a new life for the software! 🍾🎉
After serving as its steward for over a decade, @Trustwave has agreed to transfer the reins of the renowned open-source web application firewall (WAF) engine, ModSecurity, to the Open Worldwide Application Security Project (OWASP). Read more at owasp.org/blog/2024/01/09/Mo…
Core Rule Set retweeted
Exciting @owasp news! Trustwave Transfers ModSecurity Custodianship to OWASP
Cc @ChrFolini
@bufrasch @ModSecurity @CoreRuleSet
owasp.org/blog/2024/01/09/Mo…
Core Rule Set retweeted
After serving as its steward for over a decade, @Trustwave has agreed to transfer the reins of the renowned open-source web application firewall (WAF) engine, ModSecurity, to the Open Worldwide Application Security Project (OWASP). Read more at owasp.org/blog/2024/01/09/Mo…
Core Rule Set retweeted
For those wondering about #OWASP @CoreRuleSet and the new Apache Struts CVE 2023 50164.
#CRS3 detects the PoC at github.com/jakabakos/CVE-202… with a score of 20 by default. 5 is considered a critical attack.
Core Rule Set retweeted
ModSecurity is announcing the release of version 3.0.11:
trustwave.com/en-us/resource…
Core Rule Set retweeted
Speaking @swisscyberstorm 2023:
@mr_phrazer: “Unveiling Malicious Behavior in Unknown Binaries”
Executing unknown binaries carries risks. This talk discusses techniques and heuristics tackling various use cases.
Program: lnkd.in/d52RpEnH
Tix: lnkd.in/eTXQRjnP
#SCS23
Core Rule Set retweeted
Coraza - Golang modsecurity compatible web application firewall library
Lhttps://hakin9.org/coraza-golang-modsecurity-compatible-web-application-firewall-library/
#infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #Linux #windows
Core Rule Set retweeted
Playing around with #ModSecurity and @CoreRuleSet and @HAProxy. The exciting thing is that it basically works and the integration makes a decent impression so far.