modsecurity

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

Framework for Testing WAFs (FTW!)

modsecurity audit log analyser and parser

Vagrant-based configurations intended for ModSecurity performance testing

ModSecurity Django middleware

A CLI wrapper for libmodsecurity (v3.0.10)

Experiments for paper ModSec-AdvLearn: Countering Adversarial SQL Injections with Robust Machine Learning

ModSecurity CRS rules parser (project moved to CRS-support: see https://github.com/CRS-support/secrules_parsing)

Test tool for mod-security rules

👴🏻 The only tool that parses your ModSecurity audit logs to generate exceptions automagically ;)

A script to send ModSecurity logs to Elasticsearch

A simple python cli app, to learn exclusions rules from the error.log for the OWASP Coreruleset to reduce false positives.

Python bindings for libModSecurity (aka ModSecurity v3)

Modsecurity for Kubernetes, with a new way of logging.

30+ projects AWS SOC/SOAR Ecosystem portfolio with Wazuh, TheHive, Cortex, MISP, n8n, network security monitoring, Threat Detection & Hunting, Alert triage, Log Analysis, Detection engineering, Incident Response, dashboards, and AI security automation.

Practice exercises to enhance skills in tuning OWASP ModSecurity core rule set rules and implementing your own rules.

An industrial-grade Web Application Firewall (WAF) deployment using Nginx, ModSecurity, and OWASP CRS. Features a fully Dockerized SOC logging pipeline with Grafana and Loki.

Deterministic HTTP traffic generator for cybersecurity labs. Simulate SQLi, XSS, RCE, LFI attacks. Generate PCAPs for WAF & IDS testing.

The log that modsecuirty produced that translate its txt to sql and save

AI-driven autonomous optimization of OWASP ModSecurity CRS. 30 experiments, BA from 80.8% to 98.4%, FPs cut 94%.