Posts

Showing posts with the label Apache

Crs - Owasp Modsecurity Marrow Dominion Set

Image
The OWASP ModSecurity Core Rule Set (CRS) is a laid upwards of generic assault detection rules for role amongst ModSecurity or compatible spider web application firewalls. The CRS aims to protect spider web applications from a broad hit of attacks, including the OWASP Top Ten, amongst a minimum of faux alerts. The Core Rule Set provides protection against many mutual assault categories, including: SQL Injection (SQLi) Cross Site Scripting (XSS) Local File Inclusion (LFI) Remote File Inclusion (RFI) Remote Code Execution (RCE) PHP Code Injection HTTP Protocol Violations    HTTPoxy Shellshock Session Fixation Scanner Detection Metadata/Error Leakages Project Honey Pot Blacklist GeoIP Country Blocking New Features inward CRS 3 CRS three includes many coverage improvements, plus the next novel features: Over 90% reduction of faux alerts inward a default install A user-defined Paranoia Level to enable additional strict checks Application-specific...

Bonesi - The Ddos Botnet Simulator

Image
BoNeSi , the DDoS Botnet Simulator is a Tool to copy Botnet Traffic inward a testbed surroundings on the wire. It is designed to report the final result of DDoS attacks. What traffic tin hold out generated? BoNeSi generates ICMP, UDP too TCP (HTTP) flooding attacks from a defined botnet size (different IP addresses). BoNeSi is highly configurable too rates, information volume, source IP addresses, URLs too other parameters tin hold out configured. What makes it dissimilar from other tools? There are enough of other tools out at that spot to spoof IP addresses amongst UDP too ICMP, but for TCP spoofing, at that spot is no solution. BoNeSi is the commencement tool to copy HTTP-GET floods from large-scale bot networks. BoNeSi also tries to avoid to generate packets amongst tardily identifiable patterns (which tin hold out filtered out easily). Where tin I run BoNeSi ? We highly recommend to run BoNeSi inward a unopen testbed environment. However, UDP too ...