[mod-security-users] Protection against Bash injection

[Marc S. <mar...@ap...>]

For those who remember, we (Approach Belgium) published in 2011 the 
"cmdLine" transformation that handles most Windows cmd injections (and 
some basic bash injections). The "cmdLine" transformation is now 
officially part of ModSecurity for years.

We were also using, to protect our customers for some years, an 
additional transformation blocking several other bash injections.
We decided to also give it to the community.
The source code and the explanations are available on 
https://www.approach.be/en/modsecurity.html

Enjoy


	*Marc Stern
Cyber-Security Consulting Director*
Approach Belgium <https://www.approach.be>
Axis Park - Rue Edouard Belin 7 - 1435 Mont-Saint-Guibert - Belgium
Follow us: <https://www.linkedin.com/company/16513/> 
<https://twitter.com/ApproachBe>
/*Inspiring the cyber-security community*/


This e-mail and any attachment are confidential and intended solely for 
the use of the individual to whom it is addressed. If you are not the 
intended recipient, please contact the sender and delete this message 
and any attachment from your system. Unauthorised publication, use, 
dissemination, forwarding, printing or copying of this e-mail and its 
associated attachments is strictly prohibited.