본문 바로가기

웹방화벽14

mod_security - PCRE limits exceeded Just about on every request I am getting the following error:Rule execution error - PCRE limits exceeded (-8): (null).After a bunch of googling the only solutions seem to bea) Add the following in your httpd.confSecPcreMatchLimit 150000 SecPcreMatchLimitRecursion 150000 b) Add the following to your php.inipcre.backtrack_limit = 10000000 pcre.recursion_limit = 10000000 c) Use a version that was c.. 2015. 11. 16.
공개 웹 방화벽 WebKnight 3.1 사용설명서 1. 개요 2. WebKnight 소개3. WebKnight 설치 및 제거 3.1. WebKnight 설치 3.2. WebKnight 제거4. 웹나이트(WebKnight) 운영 4.1. WebKnight 기본동작 4.2. WebKnight 설정관리자(Config.exe)5. KISA 웹 취약점 점검과 차단정책 설정 5.1. 웹 취약점 점검 소개 5.2. 웹 취약점 점검 결과보고서 설명 5.3. WebKnight 차단정책 설정 출처 : KISA 2013. 12. 27.
ModSecurity v2.7.6 Release New Continuous Integration Platform (BuildBot)The ModSecurity Project team here in SpiderLabs Research wants to ensure the quality of the project so that it will run properly within the different web servers (Apache, IIS, Nginx and Java) and OS platforms. Testing each feature manually in all supported platforms versus all supported web servers is not feasible due to the amount of time that it wi.. 2013. 12. 19.
Is my Web Application Firewall Blocking WebsiteDefender? Previously we explained why some web hosting servers block the WebsiteDefender Agent, which could cause your WebsiteDefender service to malfunction. In this article, we will show you exactly how a web application firewall can block communications between the WebsiteDefender Agent and the WebsiteDefender Server. Many hosting providers or server administrators use web application firewalls, such a.. 2012. 4. 13.
False SQL Injection and Advanced Blind SQL Injection ######################################################################### # # # Exploit Title: False SQL injection and advanced blind SQL injection # # Date: 21/12/2011 # # Author: wh1ant # # # ######################################################################### 이 문서는 SQL injection 공격이 웹 방화벽이나 기타 보안 솔루션 방어 우회가 가능하다는걸 공개하기 위해 작성하였다. 한국 웹 방화벽을 대상으로 테스트 한 결과 대부분의 SQL injection 필터링 우회가 가능하였다. 이.. 2011. 12. 30.