Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 281467
2 votes
1 answer
344 views

Why Owasp-crs does not allow Content-Type: application/x-www-form-urlencoded

I try to craft a http post using this curl : curl -v -X POST "http://example.com/submit.php" -H "Content-Type: application/x-www-form-urlencoded;" --data "[email protected]" Unluckyly, it is got …
navotera's user avatar
  • 149
0 votes
2 answers
125 views

Modsecurity only show warning but not blocking?

I am using CRS 4.3.0 I try to test is it active : curl 'https://example.com/?foo=/etc/passwd&bar=/bin/sh' curl : The remote server returned an error: (403) Forbidden. However when using other approac …
navotera's user avatar
  • 149
1 vote
1 answer
35 views

Increasing critical_anomaly_score does not block request

I am using CRS 4.3.0 I am modify the default crs-setup.conf to increase the anomali_score for critical triggered rules : "id:900100,\ phase:1,\ pass,\ t:none,\ nolog,\ tag:'OWA …
navotera's user avatar
  • 149
0 votes
1 answer
78 views

Cannot allow 920600 in crs

I have these rules : SecRule REQUEST_URI "@rx ^/(.*)$" \ "id:94000001,phase:1,t:none,nolog,pass,\ ctl:ruleRemoveById=933120,\ ctl:ruleRemoveById=933150,\ ctl:ruleRemoveById=920210,\ …
navotera's user avatar
  • 149
1 vote
0 answers
58 views

Modsecurity CRS access denied with response 200?

Issue I have try to inject XSS in an input and the log total of anomaly score is 84 (enough to block the request) The action return Access denied but why it return 200 code and the action is allowed t …
navotera's user avatar
  • 149