Hacker GitHub

← All repos

owasp-modsecurity/ModSecurity

View on GitHub ↗ ★ 9,860 C++

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.

5 mentions on Hacker News by 4 people: 0 stories, 5 comments · first 2021-04-07 · latest 2024-08-15

Mentions per year 5 mentions · busiest year 2023 (2)
20082026
AllStoriesComments NewestTopOldest
  1. …pkg-config wget zlib1g-dev zlibc libxslt libgd-dev sudo apt install git cd /opt && sudo git clone https://github.com/SpiderLabs/ModSecurity cd ModSecurity sudo git submodule init sudo git submodule update sudo ./build.sh sudo ./configure…
    comment by KronisLV · 2024-08-15 · in Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server
  2. > ModSecurity for WAF: https://github.com/SpiderLabs/ModSecurity This might be of interest to some: https://www.modsecurity.org/ > Trustwave is announcing the End-of-Life (EOL) of our support for ModSecurity effective July 1, 2024. We will…
    comment by KronisLV · 2023-02-15 · in Ask HN: What's a good open-source alternative to Cloudflare?
  3. …modules and Lua scripts can go a long way for many use-cases mentioned: - ModSecurity for WAF: https://github.com/SpiderLabs/ModSecurity - L7 Rate limiting: https://github.com/openresty/lua-resty-limit-traffic - Cache:…
    comment by rrampage · 2023-02-15 · in Ask HN: What's a good open-source alternative to Cloudflare?
  4. …be caused by the bottom-of-barrel performance of the shared webhost it's currently running on). [1] https://github.com/SpiderLabs/ModSecurity [2] https://perishablepress.com/7g-firewall/ [3] https://www.wordfence.com/
    comment by Tijdreiziger · 2022-05-06 · in WordPress sites getting hacked ‘within seconds’ of TLS certificates being issued
  5. …and your web application if you insist something external like cloudflare is out of your control https://github.com/SpiderLabs/ModSecurity but bogging this up at application level is not going to work in anyone's favour
    comment by jamal-kumar · 2021-04-07 · in Ask HN: Can we collaborate on a IP Address or Regex blacklist?