Content
- Log parsers1
- Attack scenarios3
- WAF configurations2
- WAF rules6
- Contexts1
WAF - Generic RulesParent13 items
sudo cscli collections install ZoeyVid/npmplusInstalls 5 parsers and 54 scenarios.
View NPMplus →sudo cscli collections install crowdsecurity/appsec-generic-rulesThen reload CrowdSec: sudo systemctl reload crowdsec
Sign in to see which of your engines run it →Hover a line or a note to see what each field does.
name: crowdsecurity/appsec-generic-rulesappsec-rules:- crowdsecurity/base-config- crowdsecurity/generic-freemarker-ssti- crowdsecurity/generic-wordpress-uploads-php- crowdsecurity/generic-wordpress-uploads-listing- crowdsecurity/appsec-generic-test- crowdsecurity/experimental-no-user-agentappsec-configs:- crowdsecurity/generic-rules- crowdsecurity/appsec-defaultparsers:- crowdsecurity/appsec-logsscenarios:- crowdsecurity/appsec-vpatch- crowdsecurity/appsec-native- crowdsecurity/appsec-generic-testcontexts:- crowdsecurity/appsec_basedescription: "A collection of generic attack vectors for additional protection."labels:label: "WAF - Generic Rules"author: crowdsecuritytags:- waf
Sign in to see the Security Engines that run this collection, the version they run and whether it was modified locally.
This collection contains generic scenarios for appsec. These generic rules try to detect attack vectors that might be used to exploit newly discovered vulnerabilities. For instance, a scenario could look for calls such as cat /etc/passwd. The goal of this collection is to provide some level of protection in cases where a scenario for the specific vulnerability is absent.