CSPF has developed modsecurity rules that can protect servers from malicious hackers. This is written by Mr. Manish Tanwar & Mr. Suriya Prakash<\/p>\n
Though OWASP CRS covers a lot of vulnerabilities it does not protect against most backdoor’s and latest bypasses.<\/p>\n
The other rules sets that are available are commercial in nature. So CSPF is developing a growing set of rules to protect against the latest bypasses and backdoors and releasing them publicly for all to use.<\/p>\n
The rules that we have provided can be easily expanded manually to suit your own needs.<\/p>\n
The video below will show how to enable these rules and also show a small demo of their functions.<\/p>\n
The mod-security rules can be downloaded here:<\/p>\n
The rules are currently able to:<\/p>\n
<\/p>\n
<\/p>\n
How to use it?<\/strong><\/p>\n Install Modsecurity.<\/p>\n Place the custom rules in a file<\/p>\n eg:\/etc\/httpd\/msec\/created\/cus.conf<\/p>\n then edit httpd.conf or apache.conf (Depends on OS)<\/p>\n eg:\/etc\/httpd\/conf\/httpd.conf<\/p>\n add the lines like this: Then restart the server.<\/p>\n ——————————————————————————————–<\/p>\n Files:<\/strong><\/p>\n Usage Video:<\/p>\n https:\/\/drive.google.com\/file\/d\/0BwjcnnWhy4E3UkZwckV1UGM0SE0\/view?usp=sharing<\/a><\/p>\n Custom Modsecurity Rule:<\/p>\n https:\/\/drive.google.com\/file\/d\/0BwjcnnWhy4E3R1Y5T3ozTTJsS1k\/view?usp=sharing<\/a><\/p>\n Custom Modsecurity Rules(Windows View):<\/p>\n https:\/\/drive.google.com\/file\/d\/0BwjcnnWhy4E3cDhqWDQwbURMN0k\/view?usp=sharing<\/a><\/p>\n <\/p>\n","protected":false},"excerpt":{"rendered":" CSPF has developed modsecurity rules that can protect servers from malicious hackers. This is written by Mr. Manish Tanwar & Mr. Suriya Prakash Though OWASP CRS covers a lot of vulnerabilities it does not protect against most backdoor’s and latest bypasses. The other rules sets that are available are commercial in nature. So CSPF is\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=\/wp\/v2\/posts\/568"}],"collection":[{"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=568"}],"version-history":[{"count":4,"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=\/wp\/v2\/posts\/568\/revisions"}],"predecessor-version":[{"id":572,"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=\/wp\/v2\/posts\/568\/revisions\/572"}],"wp:attachment":[{"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=568"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=568"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/securityresearch.cysecurity.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=568"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n==============================================
\n<IfModule security2_module>
\ninclude msec\/modsecuritydefault.conf
\ninclude msec\/created\/cus.conf
\n<\/IfModule>
\n==============================================<\/p>\n