appsec-bot-challenge-warn-experimental WAF Configuration by crowdsecurity | CrowdSec Hub

appsec-bot-challenge-warn-experimental

WAF configuration

By: crowdsecurity
Version: 0.2

Install with a top-level collection

4 collections include it

sudo cscli collections install crowdsecurity/appsec-bot-challenge

Installs 2 parsers and 2 scenarios, via WAF - Bot Challenge Detections.

View WAF - Bot Challenge →

Installation

sudo cscli appsec-configs install crowdsecurity/appsec-bot-challenge-warn-experimental

Then reload CrowdSec: sudo systemctl reload crowdsec

Configuration

appsec-configs/crowdsecurity/appsec-bot-challenge-warn-experimental.yaml· 13 linesGitHub

1name: crowdsecurity/appsec-bot-challenge-warn-experimental
2# Generate an alert for analysis purpose without blocking the client
3inband:
4  on_challenge_submit:
5    - filter: |
6        "detect-experimental" in RequestScoreCategories() or
7        "detect-experimental-codecs" in RequestScoreCategories() or
8        "detect-experimental-cpu" in RequestScoreCategories() or
9        "detect-experimental-fonts" in RequestScoreCategories() or
10        "detect-experimental-form-factor" in RequestScoreCategories() or
11        "detect-experimental-headers" in RequestScoreCategories()
12      apply:
13        - 'FlagSubmission(RequestScoreDetail(), "verbose")'

Installed on

Know where it runs

Sign in to see the Security Engines that run this waf configuration, the version they run and whether it was modified locally.