Skip to content
@coreruleset

CRS Project

The first line of defense

CRS is an umbrella project

mindmap
  root((CRS))
    id[Rules]
      Creation
      Maintenance
      Plugins
    id[Release]
      Changelog
      Release procedure
      Backporting
    id[Security]
      Security tracker
      Triaging reports
    id[Tools]
      crs-toolchain
        regex-assembly
      go-ftw
      albedo
      Parser
        secrules_parsing
        seclang antlr
        msc_pyparser
      Linter
        rules-check (msc_pyparser based)
    id[Dev-On-Duty]
      Slack
      GH Issues
      StackOverflow
      Twitter/X
    id[Testing]
      Rules Testing
      Testing Schema
      Quantitative
      Performance
      DoS Testing
    id[Infrastructure]
      Updates (renovatebot)
      GitHub Actions
      Containers
        modsecurity-crs-docker
          apache
          nginx
          openresty
        coraza-crs-docker
      Sandbox
        AWS Infra
        OpenResty Frontend
        Challenges
        Docker Compose
    id[Project]
      Bi-Monthly meetings
      Developer Engagement
      Reimbursements
    id[Documentation]
      Website Blogs (coreruleset.org)
      Documentation (coreruleset.org/docs)
      OWASP Website (owasp.org/www-project-modsecurity-core-rule-set)
      Meeting archives
    id[Community Relationship]
      Sponsors
      Engines
      OWASP Projects
      OWASP HQ
    id[Retreat]
      Projects
      Knowledge Transfer
      Team Activities
    id[Public Relations]
      Blog Posts
      Social Media
    id[Research]
      CVEs (Seaweed)
      Status Page
      Payloads
      Evasions
Loading

Pinned Loading

  1. coreruleset coreruleset Public

    OWASP CRS (Official Repository)

    Python 2.3k 381

  2. modsecurity-crs-docker modsecurity-crs-docker Public

    Official ModSecurity Docker + Core Rule Set (CRS) images

    Shell 289 75

  3. plugin-registry plugin-registry Public

    Registry for OWASP ModSecurity Core Rule Set plugins, official and 3rd party

    29 10

  4. go-ftw go-ftw Public

    Web Application Firewall Testing Framework - Go version

    Go 119 30

  5. documentation documentation Public

    CRS Documentation

    JavaScript 4 20

  6. crs-toolchain crs-toolchain Public

    Go 7 2

Repositories

Showing 10 of 43 repositories
  • website Public

    CRS Website files

    coreruleset/website’s past year of commit activity
    HTML 0 6 4 0 Updated Nov 25, 2024
  • seclang_parser Public

    ANTLR based SecLang parser

    coreruleset/seclang_parser’s past year of commit activity
    ANTLR 1 Apache-2.0 4 1 0 Updated Nov 25, 2024
  • albedo Public

    HTTP reflector and black hole

    coreruleset/albedo’s past year of commit activity
    Go 2 Apache-2.0 1 0 0 Updated Nov 25, 2024
  • go-ftw Public

    Web Application Firewall Testing Framework - Go version

    coreruleset/go-ftw’s past year of commit activity
    Go 119 Apache-2.0 30 19 1 Updated Nov 25, 2024
  • coreruleset Public

    OWASP CRS (Official Repository)

    coreruleset/coreruleset’s past year of commit activity
    Python 2,299 Apache-2.0 381 91 13 Updated Nov 25, 2024
  • ftw-tests-schema Public

    FTW Testing YAML Schema Definition

    coreruleset/ftw-tests-schema’s past year of commit activity
    Go 0 Apache-2.0 2 5 3 Updated Nov 25, 2024
  • coreruleset/crs-toolchain’s past year of commit activity
    Go 7 Apache-2.0 2 8 2 Updated Nov 25, 2024
  • documentation Public

    CRS Documentation

    coreruleset/documentation’s past year of commit activity
    JavaScript 4 20 11 2 Updated Nov 24, 2024
  • project-seaweed Public

    Testing CVEs against CRS

    coreruleset/project-seaweed’s past year of commit activity
    Go 5 Apache-2.0 0 0 0 Updated Nov 23, 2024
  • nextcloud-rule-exclusions-plugin Public

    Rule exclusion plugin for Nextcloud

    coreruleset/nextcloud-rule-exclusions-plugin’s past year of commit activity
    11 Apache-2.0 7 2 0 Updated Nov 21, 2024