ModSecurity/test/benchmark/download-owasp-v2-rules.sh

19 lines
909 B
Bash
Executable File

#!/bin/bash
git clone https://github.com/SpiderLabs/owasp-modsecurity-crs.git owasp-v2
echo 'Include "owasp-v2/base_rules/*.conf"' >> basic_rules.conf
cat owasp-v2/base_rules/modsecurity_crs_20_protocol_violations.conf | sed 's/SecRule WEBSERVER_ERROR_LOG/#SecRule WEBSERVER_ERROR_LOG/g' > owasp-v2/base_rules/modsecurity_crs_20_protocol_violations.conf.tmp
mv owasp-v2/base_rules/modsecurity_crs_20_protocol_violations.conf.tmp owasp-v2/base_rules/modsecurity_crs_20_protocol_violations.conf
cat owasp-v2/base_rules/modsecurity_crs_40_generic_attacks.conf | sed "s/SecRule REQUEST_HEADERS:'\/(Content-Length\|Transfer-Encoding/#SecRule REQUEST_HEADERS:'\/(Content-Length|Transfer-Encoding/g" > owasp-v2/base_rules/modsecurity_crs_40_generic_attacks.conf.tmp
mv owasp-v2/base_rules/modsecurity_crs_40_generic_attacks.conf.tmp owasp-v2/base_rules/modsecurity_crs_40_generic_attacks.conf
echo "Done."