AWS SQL Injection (?)

This page summarizes the projects mentioned and recommended in the original post on reddit.com/r/netsecstudents

Our great sponsors
  • Nanos - Run Linux Software Faster and Safer than Linux with Unikernels
  • Scout APM - A developer's best friend. Try free for 14-days
  • SaaSHub - Software Alternatives and Reviews
  • GitHub repo ModSecurity

    ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

    Looks like the webserver has a Web application firewall installed (WAF). My would guess this https://github.com/SpiderLabs/ModSecurity. Has nothing to do with AWS database per se, the WAF is running on the server along Apache, as a module. Log entry was triggered because an SQL injection attempt was detected and stopped. As it looks now the website is potentially under attack.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts