Open-appsec collection

A collection for open-appsec that allow to ban IPs that made requests that open-appsec blocked in the waf. This collection handle most of the waapIncidentType that open-appsec can generate.

• SQL Injection
• Path Traversal
• LDAP Injection
• Remote Code Execution
• Vulnerability Scanning
• Cross Site Scripting
• XML External Entity
• Evasion Techniques
• General
• URL instead of file
• Cross Site Request Forgery
• Cross Site Redirect
• Open Redirect
• Schema Validation
• Bot Protection
• Error Disclosure
• Error Limit
• Illegal http method violation
• Http limit violation
• Request Rate Limit

Acquisition template

Example acquisition for this collection :

1source: file
2filenames:
3  - /var/log/nano_agent/cp-nano-http-transaction-handler.log*
4labels:
5  type: openappsec