Content
- Attack scenarios30
HTTP - CVE DetectionParent30 items
sudo cscli collections install crowdsecurity/aws-cloudfrontInstalls 2 parsers and 47 scenarios, via HTTP - Generic Protection.
View AWS CloudFront →sudo cscli collections install crowdsecurity/http-cveThen reload CrowdSec: sudo systemctl reload crowdsec
Sign in to see which of your engines run it →Hover a line or a note to see what each field does.
name: crowdsecurity/http-cvescenarios:- crowdsecurity/http-cve-2021-41773- crowdsecurity/http-cve-2021-42013- crowdsecurity/grafana-cve-2021-43798- crowdsecurity/vmware-vcenter-vmsa-2021-0027- crowdsecurity/fortinet-cve-2018-13379- crowdsecurity/pulse-secure-sslvpn-cve-2019-11510- crowdsecurity/f5-big-ip-cve-2020-5902- crowdsecurity/thinkphp-cve-2018-20062- crowdsecurity/apache_log4j2_cve-2021-44228- crowdsecurity/jira_cve-2021-26086- crowdsecurity/spring4shell_cve-2022-22965- crowdsecurity/vmware-cve-2022-22954- crowdsecurity/CVE-2022-37042- crowdsecurity/CVE-2022-41082- crowdsecurity/CVE-2022-35914- crowdsecurity/CVE-2022-40684- crowdsecurity/CVE-2022-26134- crowdsecurity/CVE-2022-42889- crowdsecurity/CVE-2022-41697- crowdsecurity/CVE-2022-46169- crowdsecurity/CVE-2022-44877- crowdsecurity/CVE-2019-18935- crowdsecurity/netgear_rce- crowdsecurity/CVE-2023-22515- crowdsecurity/CVE-2023-22518- crowdsecurity/CVE-2023-49103- crowdsecurity/CVE-2017-9841- crowdsecurity/CVE-2024-38475- crowdsecurity/CVE-2024-0012- crowdsecurity/CVE-2024-9474author: crowdsecuritydescription: "Detect CVE exploitation in http logs"labels:label: "HTTP - CVE Detection"tags:- security_engine- web- exploit
Sign in to see the Security Engines that run this collection, the version they run and whether it was modified locally.
A collection to detect exploitation of some specific http CVEs.
Works with apache2, nginx, traefik etc.
⚠️ While this collection is frequently updated with trending CVEs, it is not a WAF and does not aims at replacing a WAF. As such, an attacker might be able to bypass those signatures.