naxsi, an open-source web application firewall for nginx
summary
Naxsi is an open-source Web Application Firewall implemented as an Nginx module that defends against attacks like SQL injection, XSS, CSRF and file inclusion by scoring unexpected/‘unusual’ characters in HTTP requests rather than matching signatures. It includes a learning/whitelist mode where you crawl your site to generate rules to reduce false positives, and the talk covers both the module’s design/development within Nginx and practical usage/feedback.
AI-written summary · about
related talks
41mNaxsi, A Web Application Firewall for NGINX
27mNAVEX: Precise and Scalable Exploit Generation for Dynamic Web Applications
14mWeb Application Firewalls: A False Sense of Security?
39mHow to Reconcile Security and Agility for the Good of Your Applications
35mAutoSpear: Towards Automatically Bypassing and Inspecting Web Application Firewalls
28mMore Secure Vue & Nuxt Apps - By Default
34mOWASP Nettacker
56mAutomated Security Testing With OWASP Nettacker