Thanks to CRS co-leader Felipe Zipitria's dedicated work, please enjoy ModSecurity's revamped documentation page:
modsecurity.org/20261026/a-new…
From now, anyone can contribute the manual through its own repository. Thank you again, Felipe!
modsecurity.org/20261026/a-new…
From now, anyone can contribute the manual through its own repository. Thank you again, Felipe!
0
0
1
147
Please welcome the latest releases of ModSecurity.
github.com/owasp-modsecur…
github.com/owasp-modsecur…
And before you update, please read the relevant blog post:
modsecurity.org/20260928/secur…
github.com/owasp-modsecur…
github.com/owasp-modsecur…
And before you update, please read the relevant blog post:
modsecurity.org/20260928/secur…
0
2
7
238
Hi guys, we are pleased to present the revamped modsecurity.org website!
0
1
5
459
A new version of libmodsecurity3 has been released, please check the blog post and update your library:
modsecurity.org/20260629/about…
0
0
0
1
A new version of libmodsecurity3 has been released, please check the blog post and update your library:
modsecurity.org/20260629/about…
modsecurity.org/20260629/about…
0
0
2
583
"How big is too big" - a new blog post has been published on modsecurity.org - enjoy reading!
modsecurity.org/20260222/how-b…
modsecurity.org/20260222/how-b…
0
2
4
488
Probably there is a typo here (see the image): there is no such operator ">=". Perhaps you though "@gt".
0
0
0
59
ModSecurity retweeted
CRS will have its second community call on September 22, from 20:30 to 21:30 CEST (18:30 UTC / 2:30 p.m. ET) and will be moderated by former CRS co-leader Christian Folini. Check more details and register here: luma.com/8yc1p543
0
4
7
2,430
A new version of mod_security2 has been released, please check the blog post:
modsecurity.org/20250805/impro…
modsecurity.org/20250805/impro…
0
0
1
209
A new version of mod_security2 has been released, please check the blog post:
modsecurity.org/20250701/dos-v…
modsecurity.org/20250701/dos-v…
0
0
2
261
We don't know how old is this article, but please update it. There is a much newer version than 2.9.7 (2.9.10 is the last release).
1
0
0
52
With CRS, ModSecurity catches this attack on PL1.
$ curl -X POST -d 'q=<a href="jav%0Dascript&colon;alert(1)">' -H "x-format-output: txt-matched-rules" sandbox.coreruleset.org
Output:
941390 PL1 Javascript method detected
949110 PL1 Inbound Anomaly ...
980170 PL1 Anomaly Sco...
$ curl -X POST -d 'q=<a href="jav%0Dascript&colon;alert(1)">' -H "x-format-output: txt-matched-rules" sandbox.coreruleset.org
Output:
941390 PL1 Javascript method detected
949110 PL1 Inbound Anomaly ...
980170 PL1 Anomaly Sco...
0
0
1
156
"No Patch" - you misinform your users. The patch was applied earlier than the advisory was published. Please take a look at our GH page.
0
0
2
77
New version of mod_security2 have been released: github.com/owasp-modsecur…
This versions includes a fix against a recently discovered (another) DoS vulnerability: modsecurity.org/20250602/dos-v…
Please upgrade your module!
This versions includes a fix against a recently discovered (another) DoS vulnerability: modsecurity.org/20250602/dos-v…
Please upgrade your module!
0
0
2
209
Why is difficult? Feel free to ask on Github or on Slack: owasp.org/slack/invite, channel "project-modsecurity"
0
0
1
27
New version has been released:
Nginx connector: github.com/owasp-modsecur…
blog post: modsecurity.org/20250521/modse…
Please note that the log format has been changed!
Nginx connector: github.com/owasp-modsecur…
blog post: modsecurity.org/20250521/modse…
Please note that the log format has been changed!
0
0
2
191
New version have been released:
mod_security2: github.com/owasp-modsecur…
This versions includes a fix against a recently discovered DoS vulnerability: modsecurity.org/20250521/possi…
Please upgrade your module!
mod_security2: github.com/owasp-modsecur…
This versions includes a fix against a recently discovered DoS vulnerability: modsecurity.org/20250521/possi…
Please upgrade your module!
0
0
1
149
Happy to announce OWASP Open WAF Day: owasp2025globalappseceu.sched.com/event/1zCJN/op…
Feel free to register yourself!
#modsecurity #coreruleset #crs #coraza #waf
Feel free to register yourself!
#modsecurity #coreruleset #crs #coraza #waf
0
2
0
515