Re: Apache mode_security

[K K Mookhey <cto () nii co in>]

Maybe this is what you're looking for:

http://www.securityfocus.com/infocus/1768
http://www.nii.co.in/resources/blackhat.ppt

One caveat though: those regexes were written more than a year back, and 
much water has flown under the bridge since then.

KK

K. K. Mookhey
Founder
NII Consulting
Web: www.nii.co.in
------------------------------------
Comprehensive Security Assessment Software
http://www.nii.co.in/products.html
------------------------------------

This message may contain privileged and confidential information and is 
solely for the use of intended recipient. If you are not the intended 
recipient you should not disseminate, distribute, store, print, copy or 
deliver this message. Please notify the sender immediately by e-mail if 
you have received this e-mail by mistake and delete this e-mail from 
your system.

Serg B. wrote:
> No, really? I would have never thought of that Erez. Geezzz
>
> I asked for something specific, ready made expressions - perhaps you
> need to read the manual before you post?
>
> I hate when people reply with unjustified RTFM
>
>   Serg 
>
> On Wed, 2005-11-16 at 00:33 -0800, Erez Schwarz wrote:
>
> > Use the mod_security manual, you'll get all the info you need, it's on
> > the web site,
> >
> > Best regards,
> > Erez
> >
> > -----Original Message-----
> > From: Serg Belokamen [mailto:serg.belokamen () gmail com] 
> > Sent: Tuesday, November 15, 2005 4:24 PM
> > To: webappsec () securityfocus com
> > Subject: Apache mode_security
> >
> > I am look at mod_security module for Apache... looks interesting so far.
> >
> > Can anyone point me in the right direction, URL perhaps, in regards to
> > regular expression list (if one exists) to detect common attacks over
> > HTTP (SQL injections, XSS, etc.)
> >
> >   Thanks,
> >      Serg