HTTP - Generic Protection Collection by crowdsecurity

Name: HTTP - Generic Protection
Author: crowdsecurity

Installation

cscli collections install crowdsecurity/base-http-scenarios

Source code

contains no parser, meant to be embedded

A collection of defensive (implementation independent) scenarios for http services :

aggressive crawl detection
scanning/probing detection
bad user-agent detection
path traversal detection
sensitive data access attempts detection
SQL injection detection
administration interface probing detection

⚠️ This collection is not a WAF and this scenario does not aims at replacing a WAF.

Content

Hub collection

« HTTP - Generic Protection »Collection
v1.4 by crowdsecurity

http-logs

http-cve

http-crawl-non_statics

http-probing

http-bad-user-agent

http-path-traversal-probing

http-sensitive-files

http-sqli-probing

http-xss-probing

http-backdoors-attempts

http-w00tw00t

http-generic-bf

http-open-proxy

http-admin-interface-probing

http-wordpress-scan

http-cve-probing

http-sap-interface-probing

http-generic-test