Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

YDA-5984 add mod-evasive to Ubuntu and Alma 9 #524

Open
wants to merge 14 commits into
base: development
Choose a base branch
from

Conversation

FuHsinyu
Copy link
Member

@FuHsinyu FuHsinyu commented Feb 12, 2025

Added mod-evasive to prevent from large amount of simultaneous Fuzzing requests.
Tests have been performed:

  1. Install and overwrite existing mod-evasive config (ubuntu) -> Done
  2. Install mod-evasive in a new and clean VM (ubuntu)-> Done.
  3. Install and overwrite existing mod-evasive config (Alma 9) -> DOing
  4. Install mod-evasive in a new and clean VM (Alma 9)-> Done.

How to test with FFUF fuzzing

  1. Install FFUF fuzzing, and prepare a wordlist.txt (example: download from https://github.com/danielmiessler/SecLists/blob/master/Discovery/Web-Content/common.txt )
  2. Run with ./ffuf/ffuf -u https://portal.yoda.test/FUZZ -w ./wordlist.txt -of html -o ./outputfile.html -mc 200,204,301,302,307,401,403,308 -rate 60 -t 100 where rate > 50 should cause Sever Denials in Apache LOg.

@FuHsinyu FuHsinyu changed the title add mod-evasive install and config YDA-5984 add mod-evasive to Ubuntu and Alma 9 Feb 25, 2025
@lwesterhof lwesterhof self-requested a review February 26, 2025 13:27
@FuHsinyu FuHsinyu marked this pull request as ready for review February 26, 2025 14:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant