https://mazinahmed.net/tags/modsecurity/Recent content in ModSecurity on Mazin AhmedHugoenTue, 03 Oct 2017 00:00:00 +0000https://mazinahmed.net/blog/modsecurity-handbook-2nd-edition-review/Tue, 03 Oct 2017 00:00:00 +0000https://mazinahmed.net/blog/modsecurity-handbook-2nd-edition-review/<hr> <p> <figure><img src="https://mazinahmed.net/uploads/assets/static/91ac0927-44a2-443c-8e87-739b4e5203f0.png" alt="" class="mx-auto my-0 rounded-md" /> </figure> </p> <p>This blog post briefly reviews the ModSecurity Handbook - 2nd edition.</p> <p>I have been working in the WAF industry for quite a long time. My main interest is WAF evasions, where I worked on the popular <a href="http://blog.mazinahmed.net/2015/09/evading-all-web-application-firewalls.html" target="_blank" rel="noreferrer">&ldquo;Evading All WAF XSS Filters&rdquo;</a> research. In 2015, the research results showed that ModSecurity (with CRS) is the most difficult to evade, according to my testing.</p> <p>After I finished my research, I became interested in ModSecurity and the OWASP Core Rule Set.</p>