Repositories list

• website

  Public
  CRS Website files

  websitehugohugo-site+ 1crs

  HTML

  •6•0•5•1•Updated Nov 25, 2024Nov 25, 2024

• crs-toolchain

  Public
  toolscrs

  Go

  •

  Apache License 2.0

  •2•7•9•2•Updated Nov 25, 2024Nov 25, 2024

• seclang_parser

  Public
  ANTLR based SecLang parser

  antlr4antlr4-grammarseclang

  ANTLR

  •

  Apache License 2.0

  •3•1•1•1•Updated Nov 25, 2024Nov 25, 2024

• coreruleset

  Public
  OWASP CRS (Official Repository)

  securityowaspruleset+ 1crs

  Python

  •

  Apache License 2.0

  •381•2.3k•91•13•Updated Nov 24, 2024Nov 24, 2024

• go-ftw

  Public
  Web Application Firewall Testing Framework - Go version

  testingwaftesting-tools

  Go

  •

  Apache License 2.0

  •30•119•20•1•Updated Nov 24, 2024Nov 24, 2024

• documentation

  Public
  CRS Documentation

  hugocrs

  JavaScript

  •20•4•11•2•Updated Nov 24, 2024Nov 24, 2024

• project-seaweed

  Public
  Testing CVEs against CRS

  wafowaspcve-scanning+ 1core-rule-set

  Go

  •

  Apache License 2.0

  •0•5•0•0•Updated Nov 23, 2024Nov 23, 2024

• nextcloud-rule-exclusions-plugin

  Public
  Rule exclusion plugin for Nextcloud

  Apache License 2.0

  •7•11•2•0•Updated Nov 21, 2024Nov 21, 2024

• renovate-config

  Public
  Mend Renovate centralized configuration

  0•0•0•0•Updated Nov 20, 2024Nov 20, 2024

• albedo

  Public
  HTTP reflector and black hole

  Go

  •

  Apache License 2.0

  •1•2•1•0•Updated Nov 20, 2024Nov 20, 2024

• ftw-tests-schema

  Public
  FTW Testing YAML Schema Definition

  yamlschematests+ 2ftwcoreruleset

  Go

  •

  Apache License 2.0

  •2•0•5•1•Updated Nov 19, 2024Nov 19, 2024

• secrules_parsing

  Public
  A parser for the SecRules Langue

  Python

  •

  Apache License 2.0

  •8•21•1•1•Updated Nov 12, 2024Nov 12, 2024

• wordpress-rule-exclusions-plugin

  Public
  Rule exclusion plugin for WordPress.

  crscrs-plugin

  Apache License 2.0

  •7•17•4•2•Updated Nov 7, 2024Nov 7, 2024

• drupal-rule-exclusions-plugin

  Public
  Rule exclusion plugin for Drupal

  Apache License 2.0

  •3•4•0•1•Updated Nov 7, 2024Nov 7, 2024

• phpmyadmin-rule-exclusions-plugin

  Public
  Rule exclusion plugin for phpMyAdmin.

  crscrs-plugin

  Apache License 2.0

  •5•1•1•0•Updated Nov 7, 2024Nov 7, 2024

• modsecurity-crs-docker

  Public
  Official ModSecurity Docker + Core Rule Set (CRS) images

  dockermodsecuritymodsecurity-core-rule-set+ 1core-rule-set

  Shell

  •

  Apache License 2.0

  •75•288•8•4•Updated Nov 7, 2024Nov 7, 2024

• coraza-crs-docker

  Public
  Coraza, CRS and Caddy

  Shell

  •1•3•1•0•Updated Oct 29, 2024Oct 29, 2024

• phpbb-rule-exclusions-plugin

  Public
  Rule exclusion plugin for phpBB.

  Apache License 2.0

  •3•2•0•0•Updated Oct 27, 2024Oct 27, 2024

• xenforo-rule-exclusions-plugin

  Public
  Rule exclusion plugin for XenForo

  Apache License 2.0

  •1•0•0•1•Updated Oct 27, 2024Oct 27, 2024

• dokuwiki-rule-exclusions-plugin

  Public
  Rule exclusion plugin for DokuWiki

  Apache License 2.0

  •1•0•0•0•Updated Oct 27, 2024Oct 27, 2024

• crs-plugin-test-action

  Public
  GitHub Action workflows to test plugins

  plugincrsgithub-actions

  Apache License 2.0

  •1•1•0•0•Updated Oct 24, 2024Oct 24, 2024

• crs-linter

  Public
  Rules checker and linter for the CRS project

  Python

  •

  Apache License 2.0

  •1•0•0•0•Updated Oct 19, 2024Oct 19, 2024

• .github

  Public
  Organization description

  Apache License 2.0

  •0•0•0•0•Updated Oct 3, 2024Oct 3, 2024

• dos-protection-plugin-modsecurity

  Public
  Anti-automation rules plugin to detect denial of service attacks

  Apache License 2.0

  •2•4•3•1•Updated Jul 8, 2024Jul 8, 2024

• plugin-registry

  Public
  Registry for OWASP ModSecurity Core Rule Set plugins, official and 3rd party

  crscrs-plugin

  10•29•3•1•Updated Jul 6, 2024Jul 6, 2024

• fake-bot-plugin

  Public
  This is a plugin that brings blocking of bots faking User-Agent to CRS.

  crscrs-plugin

  Lua

  •

  Apache License 2.0

  •5•9•1•0•Updated Jun 30, 2024Jun 30, 2024

• google-oauth2-plugin

  Public
  Plugin to suppress false positives with Google OAuth2 online authorization service callbacks.

  Apache License 2.0

  •3•2•0•0•Updated Jun 29, 2024Jun 29, 2024

• cpanel-rule-exclusions-plugin

  Public
  Rule exclusion plugin for cPanel

  Apache License 2.0

  •1•0•0•1•Updated Jun 29, 2024Jun 29, 2024

• body-decompress-plugin

  Public
  This is a plugin that brings on-the-fly decompression of RESPONSE_BODY to CRS.

  Lua

  •

  Apache License 2.0

  •4•1•0•2•Updated Jun 2, 2024Jun 2, 2024

• template-plugin

  Public template
  Example plugin template to be used together with the OWASP CRS

  pluginowaspcrs

  Apache License 2.0

  •5•0•0•0•Updated May 29, 2024May 29, 2024