appsec-bot-challenge-exclude-webhooks WAF Configuration by crowdsecurity | CrowdSec Hub

appsec-bot-challenge-exclude-webhooks

WAF configuration

By: crowdsecurity
Version: 0.4

Install with a top-level collection

3 collections include it

sudo cscli collections install crowdsecurity/appsec-bot-challenge

Installs 2 parsers and 2 scenarios, via WAF - Bot Challenge Path Exclusions.

View WAF - Bot Challenge →

Installation

sudo cscli appsec-configs install crowdsecurity/appsec-bot-challenge-exclude-webhooks

Then reload CrowdSec: sudo systemctl reload crowdsec

Configuration

appsec-configs/crowdsecurity/appsec-bot-challenge-exclude-webhooks.yaml· 8 linesGitHub

1name: crowdsecurity/appsec-bot-challenge-exclude-webhooks
2# Let third-party webhook callbacks fly through without a challenge.
3# Do not edit this file to add your own exclusions, create a custom config.
4inband:
5  pre_eval:
6    - filter: "req.URL.Path startsWith '/webhooks/'"
7      apply:
8        - ExemptFromChallenge("webhooks")

Installed on

Know where it runs

Sign in to see the Security Engines that run this waf configuration, the version they run and whether it was modified locally.