Configures ModSecurity WAF with OWASP CRS for web app logging, tunes rules to reduce false positives, analyzes audit logs for attacks, and implements custom SecRules for app-specific threats.
npx claudepluginhub killvxk/cybersecurity-skills-zhThis skill uses the workspace's default tool permissions.
ModSecurity 是一个开源 WAF（Web 应用防火墙）引擎，可与 Apache、Nginx 和 IIS 协同工作。OWASP
Configures ModSecurity WAF with OWASP CRS for web app logging, tunes rules to cut false positives, analyzes audit logs for attacks, and adds custom SecRules.
Configures ModSecurity WAF with OWASP CRS for web application logging, tunes rules to reduce false positives, analyzes audit logs for attacks, and implements custom SecRules.
Analyzes ModSecurity, AWS WAF, and Cloudflare logs to detect SQL injection attacks. Identifies patterns (UNION SELECT, OR 1=1, SLEEP(), BENCHMARK()), tracks IP sources, associates multi-stage attempts, generates OWASP-classified reports.
Share bugs, ideas, or general feedback.
ModSecurity 是一个开源 WAF（Web 应用防火墙）引擎，可与 Apache、Nginx 和 IIS 协同工作。OWASP 核心规则集（CRS）提供通用攻击检测规则，覆盖 SQL 注入、XSS、RCE、LFI 及其他 OWASP Top 10 攻击。 ModSecurity 在审计日志中记录完整的请求/响应数据以供取证分析，并生成可接入 SIEM 平台的告警。
ModSecurity: Warning. Pattern match "(?:union\s+select)" [file "/etc/modsecurity/crs/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [severity "CRITICAL"]