Skip to content
@coreruleset

CRS Project

The first line of defense

CRS is an umbrella project

mindmap
  root((CRS))
    id[Rules]
      Creation
      Maintenance
      Plugins
    id[Release]
      Changelog
      Release procedure
      Backporting
    id[Security]
      Security tracker
      Triaging reports
    id[Tools]
      crs-toolchain
        regex-assembly
      go-ftw
      albedo
      Parser
        secrules_parsing
        seclang antlr
        msc_pyparser
      Linter
        rules-check (msc_pyparser based)
    id[Dev-On-Duty]
      Slack
      GH Issues
      StackOverflow
      Twitter/X
    id[Testing]
      Rules Testing
      Testing Schema
      Quantitative
      Performance
      DoS Testing
    id[Infrastructure]
      Updates (renovatebot)
      GitHub Actions
      Containers
        modsecurity-crs-docker
          apache
          nginx
          openresty
        coraza-crs-docker
      Sandbox
        AWS Infra
        OpenResty Frontend
        Challenges
        Docker Compose
    id[Project]
      Bi-Monthly meetings
      Developer Engagement
      Reimbursements
    id[Documentation]
      Website Blogs (coreruleset.org)
      Documentation (coreruleset.org/docs)
      OWASP Website (owasp.org/www-project-modsecurity-core-rule-set)
      Meeting archives
    id[Community Relationship]
      Sponsors
      Engines
      OWASP Projects
      OWASP HQ
    id[Retreat]
      Projects
      Knowledge Transfer
      Team Activities
    id[Public Relations]
      Blog Posts
      Social Media
    id[Research]
      CVEs (Seaweed)
      Status Page
      Payloads
      Evasions
Loading

Pinned Loading

  1. coreruleset coreruleset Public

    OWASP CRS (Official Repository)

    Python 2.3k 390

  2. modsecurity-crs-docker modsecurity-crs-docker Public

    Official ModSecurity Docker + Core Rule Set (CRS) images

    Dockerfile 299 75

  3. plugin-registry plugin-registry Public

    Registry for OWASP ModSecurity Core Rule Set plugins, official and 3rd party

    30 10

  4. go-ftw go-ftw Public

    Web Application Firewall Testing Framework - Go version

    Go 127 30

  5. documentation documentation Public

    CRS Documentation

    JavaScript 4 20

  6. crs-toolchain crs-toolchain Public

    The Swiss army knife for CRS developers

    Go 7 2

Repositories

Showing 10 of 43 repositories
  • coreruleset Public

    OWASP CRS (Official Repository)

    coreruleset/coreruleset’s past year of commit activity
    Python 2,347 Apache-2.0 390 90 15 Updated Dec 28, 2024
  • phpmyadmin-rule-exclusions-plugin Public

    Rule exclusion plugin for phpMyAdmin.

    coreruleset/phpmyadmin-rule-exclusions-plugin’s past year of commit activity
    1 Apache-2.0 5 1 0 Updated Dec 26, 2024
  • modsecurity-crs-docker Public

    Official ModSecurity Docker + Core Rule Set (CRS) images

    coreruleset/modsecurity-crs-docker’s past year of commit activity
    Dockerfile 299 Apache-2.0 75 9 5 Updated Dec 25, 2024
  • website Public

    CRS Website files

    coreruleset/website’s past year of commit activity
    HTML 0 6 4 0 Updated Dec 24, 2024
  • documentation Public

    CRS Documentation

    coreruleset/documentation’s past year of commit activity
    JavaScript 4 20 10 2 Updated Dec 24, 2024
  • go-ftw Public

    Web Application Firewall Testing Framework - Go version

    coreruleset/go-ftw’s past year of commit activity
    Go 127 Apache-2.0 30 16 2 Updated Dec 23, 2024
  • ftw-tests-schema Public

    FTW Testing YAML Schema Definition

    coreruleset/ftw-tests-schema’s past year of commit activity
    Go 0 Apache-2.0 3 4 1 Updated Dec 23, 2024
  • albedo Public

    HTTP reflector and black hole

    coreruleset/albedo’s past year of commit activity
    Go 2 Apache-2.0 1 0 0 Updated Dec 23, 2024
  • crs-toolchain Public

    The Swiss army knife for CRS developers

    coreruleset/crs-toolchain’s past year of commit activity
    Go 7 Apache-2.0 2 8 2 Updated Dec 23, 2024
  • wordpress-rule-exclusions-plugin Public

    Rule exclusion plugin for WordPress.

    coreruleset/wordpress-rule-exclusions-plugin’s past year of commit activity
    18 Apache-2.0 7 3 1 Updated Dec 20, 2024