bryanhsu00/modsecurity-waf-demo

modsecurity-waf-demo

modsecurity-waf-demo

Introduction

An implementation of a WAF proxy server sitting front of a vulnerable website(DVWA)

Usage

docker-compose up

Components

• etc: modsecurity and nginx config files
• modsec_audit.log: modsecurity log file

References

• https://janikvonrotz.ch/2020/02/26/nginx-waf-with-modsecurity-and-owasp-crs/