spiderlabs/owasp-modsecurity-crs

The OWASP ModSecurity Core Rule Set (CRS) is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls, designed to protect web applications from a wide range of attacks including the OWASP Top Ten. This project is aimed at security professionals, web administrators, and developers who want to enhance their web application security with minimal false alerts. Note that the project has moved to a new repository at https://github.com/coreruleset/coreruleset and this original repository is now archived.