-
Good morning, I would like to try to implement my tool.
It's called Lrod and is used to help bug hunters and pentesters during reconnaissance.
**Characteristics:**
☑ Enumeration of subdomains…
-
Hello
I'm using lua-resty-waf with latest modsecurity crs rules only. But recently I realized that my response rules not working at all! It seems response body won't process! I tested this in reverse…
-
### Description
We expect to monitor/protect all our external and internal TLS communications through NeuVector network security features. In that case, would the built-in network attack detections (…
-
## CKAN version
v2.9.7
## Describe the bug
We are observing 403 errors while users attempt to update dataset in the catalogue, which are being flagged as SQL injection attacks. This is observed t…
-
We should improve the security model of YunoHost with lightweight and fine-tuned tools for the threat model of a standard YunoHost install (vulnerable web-apps, non-targeted attacks by bots…).
### …
-
"m-XSS vectors bypassed widely deployed server-side XSS protection techniques (like HTML Purifier, kses, htmlLawed, Blueprint and Google Caja), client-side filters (XSS Auditor, IE XSS Filter), Web Ap…
-
### Description
Hello,
I'm facing some false positive issue with rule id 942440 (Detect SQL Comment Sequences).
If the value is a domain name converted into Punycode (IDNA encoding), the regular …
-
Hey Guys,
is it possible to add Google Cloud Armor to the list of detected vendors?
-
Attempted to login to the Mythical Mysfits site but failed to remember password. Repeated attempts either successful/unsuccessful
Possible mediation:
- Send an email alert to the account owner
-…
-
Hi Team,
Is PHPIDS compatible with PHP 7.2? has there been any compatibility testing conducted against PHP 7.2?