WAF Rules

More info

Search by name

Authors

243 waf rules

AppSec Generic Test
crowdsecurity/appsec-generic-test
Appsec generic test: trigger on get /crowdsec-test-ntktljhv4tfbsk3wvlhiobnl`
v0.3
crowdsecurityv0.3—
Install with
$ cscli appsec-rules install crowdsecurity/appsec-generic-test
or pressc
base-config
crowdsecurity/base-config
No description
v0.1
crowdsecurityv0.1—
Install with
$ cscli appsec-rules install crowdsecurity/base-config
or pressc
crs
crowdsecurity/crs
No description
v0.6
crowdsecurityv0.6—
Install with
$ cscli appsec-rules install crowdsecurity/crs
or pressc
crs-exclusion-plugin-cpanel
crowdsecurity/crs-exclusion-plugin-cpanel
No description
v0.1
crowdsecurityv0.1—
Install with
$ cscli appsec-rules install crowdsecurity/crs-exclusion-plugin-cpanel
or pressc
crs-exclusion-plugin-dokuwiki
crowdsecurity/crs-exclusion-plugin-dokuwiki
No description
v0.1
crowdsecurityv0.1—
Install with
$ cscli appsec-rules install crowdsecurity/crs-exclusion-plugin-dokuwiki
or pressc
crs-exclusion-plugin-drupal
crowdsecurity/crs-exclusion-plugin-drupal
No description
v0.1
crowdsecurityv0.1—
Install with
$ cscli appsec-rules install crowdsecurity/crs-exclusion-plugin-drupal
or pressc
crs-exclusion-plugin-google-oauth2
crowdsecurity/crs-exclusion-plugin-google-oauth2
No description
v0.1
crowdsecurityv0.1—
Install with
$ cscli appsec-rules install crowdsecurity/crs-exclusion-plugin-google-oauth2
or pressc
crs-exclusion-plugin-nextcloud
crowdsecurity/crs-exclusion-plugin-nextcloud
No description
v0.1
crowdsecurityv0.1—
Install with
$ cscli appsec-rules install crowdsecurity/crs-exclusion-plugin-nextcloud
or pressc
crs-exclusion-plugin-phpbb
crowdsecurity/crs-exclusion-plugin-phpbb
No description
v0.1
crowdsecurityv0.1—
Install with
$ cscli appsec-rules install crowdsecurity/crs-exclusion-plugin-phpbb
or pressc
crs-exclusion-plugin-phpmyadmin
crowdsecurity/crs-exclusion-plugin-phpmyadmin
No description
v0.1
crowdsecurityv0.1—
Install with
$ cscli appsec-rules install crowdsecurity/crs-exclusion-plugin-phpmyadmin
or pressc
crs-exclusion-plugin-wordpress
crowdsecurity/crs-exclusion-plugin-wordpress
No description
v0.1
crowdsecurityv0.1—
Install with
$ cscli appsec-rules install crowdsecurity/crs-exclusion-plugin-wordpress
or pressc
crs-exclusion-plugin-xenforo
crowdsecurity/crs-exclusion-plugin-xenforo
No description
v0.1
crowdsecurityv0.1—
Install with
$ cscli appsec-rules install crowdsecurity/crs-exclusion-plugin-xenforo
or pressc
Missing User-Agent Header
crowdsecurity/experimental-no-user-agent
Protect against no user agent
v0.3
crowdsecurityv0.3—
Install with
$ cscli appsec-rules install crowdsecurity/experimental-no-user-agent
or pressc
FreeMarker - Server-Side Template Injection
crowdsecurity/generic-freemarker-ssti
Generic freemarker ssti
v0.4
crowdsecurityv0.4—
Install with
$ cscli appsec-rules install crowdsecurity/generic-freemarker-ssti
or pressc
WordPress Uploads - Directory Listing
crowdsecurity/generic-wordpress-uploads-listing
Protect wordpress uploads directory from listing files
v0.6
crowdsecurityv0.6—
Install with
$ cscli appsec-rules install crowdsecurity/generic-wordpress-uploads-listing
or pressc
WordPress Uploads - PHP Execution
crowdsecurity/generic-wordpress-uploads-php
Detect php execution in wordpress uploads directory
v0.3
crowdsecurityv0.3—
Install with
$ cscli appsec-rules install crowdsecurity/generic-wordpress-uploads-php
or pressc
ConnectWise ScreenConnect - Authentication Bypass
crowdsecurity/vpatch-connectwise-auth-bypass
Detect exploitation of auth bypass in connectwise screenconnect
v0.4
crowdsecurityv0.4—
Install with
$ cscli appsec-rules install crowdsecurity/vpatch-connectwise-auth-bypass
or pressc
SquirrelMail - XSS
crowdsecurity/vpatch-CVE-2002-1131
Detects xss attempts in squirrelmail 1.2.6/1.2.7 via unsanitized input in addressbook, options, search, and help modules.
v0.2
crowdsecurityv0.2—
Install with
$ cscli appsec-rules install crowdsecurity/vpatch-CVE-2002-1131
or pressc
Jira Rainbow.Zen - XSS
crowdsecurity/vpatch-CVE-2007-0885
Detects xss vulnerability in jira rainbow.zen via the id parameter in browseproject.jspa.
v0.2
crowdsecurityv0.2—
Install with
$ cscli appsec-rules install crowdsecurity/vpatch-CVE-2007-0885
or pressc
Last.fm Rotation - Local File Inclusion
crowdsecurity/vpatch-CVE-2014-5181
Detects path traversal in last.fm rotation plugin via snode parameter in lastfm-proxy.php
v0.3
crowdsecurityv0.3—
Install with
$ cscli appsec-rules install crowdsecurity/vpatch-CVE-2014-5181
or pressc

1/13

1 to 20 of 243 results

About waf rules

WAF Rules allow the detection and blocking of malevolent requests. They can inspect any part of the HTTP request and apply the necessary transformations to ensure the malevolent payload is caught. They will often focus on a specific vulnerability (associated with a CVE).

WAF Rules

AppSec Generic Test

base-config

crs

crs-exclusion-plugin-cpanel

crs-exclusion-plugin-dokuwiki

crs-exclusion-plugin-drupal

crs-exclusion-plugin-google-oauth2

crs-exclusion-plugin-nextcloud

crs-exclusion-plugin-phpbb

crs-exclusion-plugin-phpmyadmin

crs-exclusion-plugin-wordpress

crs-exclusion-plugin-xenforo

Missing User-Agent Header

FreeMarker - Server-Side Template Injection

WordPress Uploads - Directory Listing

WordPress Uploads - PHP Execution

ConnectWise ScreenConnect - Authentication Bypass

SquirrelMail - XSS

Jira Rainbow.Zen - XSS

Last.fm Rotation - Local File Inclusion

About waf rules