en en en en en en en en en en en hbs_lat en fr en en it en en en en de en en en en en en en en en en en en en en en en en en fr en es en en en en en es en en en en de de en en az en en
This entry was posted in Security and tagged apache security ssl tcpdump tls tshark wireshark on 20.01.2022 by Simon Studer
To debug HTTP requests, it may be useful to capture traffic and look at the packets that are sent back and forth between the client and the server. This is trivial when HTTP requests are sent over an unencrypted channel. In this case it is easy enough to use a tool like tcpdump to capture […]
The phasing out of legacy encryption protocols like TLS 1.0 or the family of CBC encryption ciphers is a recurring necessity. This has been going on for many years. And it will only be a few years until TLS 1.2 should be retired in favor of its successor TLS 1.3. When disabling one of the […]
An A7 First Aid Kit
This entry was posted in Security and tagged apache Core Rule Set CRS3 ModRewrite modsecurity OWASP Top10 security SSL/TLS on 30.05.2017 by Christian Folini
Let’s consider Dave Wichers and the OWASP Top 10 project resists all the pressure and the 2017 edition of OWASP Top 10 will include the new A7 “Insufficient Attack Protection”. Lately the discussion has turned more constructive so maybe that prospect is not all that unrealistic. But honestly, I can not tell if A7 will […]
Extending and Analyzing Apache Access Logs
This entry was posted in Security and tagged apache core-rules modsecurity on 14.10.2016 by Christian Folini
Today, we are releasing the next tutorial in our Apache / ModSecurity series: Extending and Analyzing the Access Log “What’s the big deal?” I hear you say. I admit, it may sound a bit boring, but log files are primordial. Configuring the right logfile makes the difference between ignorance and insight into you server. There […]
Introducing a Series of Apache/ModSecurity Tutorials
This entry was posted in Security and tagged apache core-rules modsecurity on 11.10.2016 by Christian Folini
The release of the OWASP ModSecurity Core Rule Set 3.0 is drawing closer and closer. This made me think about a way to introduce new users to ModSecurity and the Core Rules. Despite online documentation and blog posts and google and stack overflow and what not: There is no one stop place to learn it […]
Kubuntu to Arch Linux
ModSecurity / CRS Tutorials
Apache / NGINX Tutorials
ModSecurity CRS Rules Inventory
ModSecurity / CRS Newsletter
Phone +41 31 974 08 08
Ansible apache automation Cisco core-rules Core Rule Set CRS CRS3 DDoS Django drupal enigma enigma2017 firewall ModRewrite modsecurity NCS nervecenter netdisco nftables NMS OIN OpenSource OWASP Top10 PostgreSQL Proxmox Python 3 QoS Risks Sampling Mode security ssl SSL/TLS Swiss Cyber Experts Switzerland syslog tcpdump tls tshark typo3 ubuntu wireshark zenoss