Category: Technical

Tags used by OWASP CRS ModSecurity rules

I couldn’t find a definitive list of the tags used by the OWASP CRS ModSecurity rules, so after a bit of faffing around, here’s what I’ve come up with for the “base” rules in OWASP CRS version 2.2.9 (current at the time of writing). I’ve tried to group them together as best I can: Web Attack: OWASP_CRS/WEB_ATTACK/XSS OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL OWASP_CRS/WEB_ATTACK/RFI OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION...

ImageMagick and PHP 5.4

When building the PHP imagick module for ImageMagick on a server running PHP 5.4 (a cPanel/WHM box in this case), you receive the following error: /root/tmp/pear/imagick/imagick_class.c: In function ‘zim_imagick_setfont’: /root/tmp/pear/imagick/imagick_class.c:1442: error: ‘struct _php_core_globals’ has no member named ‘safe_mode’ /root/tmp/pear/imagick/imagick_class.c:1442: error: ‘CHECKUID_CHECK_FILE_AND_DIR’ undeclared (first use in this function) /root/tmp/pear/imagick/imagick_class.c:1442: error: (Each undeclared identifier is reported only once /root/tmp/pear/imagick/imagick_class.c:1442: error: for each...