Gecko [ georgetownmover.com ]

Name	Size	Permission	Date
docs	[ DIR ]	drwxr-xr-x	2025-02-25 05:53
rules	[ DIR ]	drwxr-xr-x	2025-02-25 05:53
tests	[ DIR ]	drwxr-xr-x	2025-02-25 05:53
util	[ DIR ]	drwxr-xr-x	2025-02-25 05:53
CHANGES.md	75.01 KB	-rw-r--r--	2023-08-02 10:15
CONTRIBUTING.md	7.67 KB	-rw-r--r--	2023-08-02 10:15
CONTRIBUTORS.md	4.58 KB	-rw-r--r--	2023-08-02 10:15
INSTALL	16.44 KB	-rw-r--r--	2023-08-02 10:15
KNOWN_BUGS	2.77 KB	-rw-r--r--	2023-08-02 10:15
LICENSE	11.1 KB	-rw-r--r--	2023-08-02 10:15
README.md	2.47 KB	-rw-r--r--	2023-08-02 10:15
SECURITY.md	106 B	-rw-r--r--	2023-08-02 10:15
SPONSORS.md	152 B	-rw-r--r--	2023-08-02 10:15
crs-setup.conf	34.2 KB	-rw-r--r--	2023-08-02 10:15

Rename

![GHA build v3.3/dev](https://github.com/coreruleset/coreruleset/workflows/Regression%20Tests/badge.svg?branch=v3.3%2Fdev)
![GHA build v3.2/dev](https://github.com/coreruleset/coreruleset/workflows/Regression%20Tests/badge.svg?branch=v3.2%2Fdev)
![GHA build v3.1/dev](https://github.com/coreruleset/coreruleset/workflows/Regression%20Tests/badge.svg?branch=v3.1%2Fdev)
[![OWASP Flagship](https://img.shields.io/badge/owasp-flagship%20project-38a047.svg)](https://owasp.org/projects/)
[![CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/1390/badge)](https://bestpractices.coreinfrastructure.org/projects/1390)
[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)

# OWASP ModSecurity Core Rule Set (CRS)

The OWASP ModSecurity Core Rule Set (CRS) is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts.

## CRS Resources

Please see the [OWASP ModSecurity Core Rule Set page](https://coreruleset.org/) to get introduced to the CRS and view resources on installation, configuration, and working with the CRS.

## Contributing to the CRS

We strive to make the OWASP ModSecurity CRS accessible to a wide audience of beginner and experienced users. We are interested in hearing any bug reports, false positive alert reports, evasions, usability issues, and suggestions for new detections.

[Create an issue on GitHub](https://github.com/coreruleset/coreruleset/issues) to report a false positive or false negative (evasion). Please include your installed version and the relevant portions of your ModSecurity audit log.

[Sign up for our Google Group](https://groups.google.com/a/owasp.org/forum/#!forum/modsecurity-core-rule-set-project) to ask general usage questions and participate in discussions on the CRS. Also [here](https://lists.owasp.org/pipermail/owasp-modsecurity-core-rule-set/index) you can find the archives for the previous mailing list.

[Join the #coreruleset channel on OWASP Slack](http://owaspslack.com) to chat about the CRS.

## License

The OWASP ModSecurity Core Rule Set is distributed under Apache Software License (ASL) version 2. Please see the enclosed LICENSE file for full details.