Ein Vergleichstest von Web Application Firewalls

Ein Vergleich von verschiedenen Web Application Firewalls - unter anderem mit modsecurity. Mein Favorit schneidet ganz gut ab (wenn man sich durch die mühsame Konfiguration durchbeist)

This document contains the results of a comparative penetration test conducted by a team of security specialists at Zero Science Lab against three ‘leading’ web application firewall solutions. Our goal was to bypass security controls in place, in any way we can, circumventing whatever filters they have. This report also outlines the setup and configuration process, as well as a detailed security assessment.

201303-waf-test.png