Re: [Owasp-modsecurity-core-rule-set] is there any tool to analyse apache access logs against CRS?

2019-01-31 Thread Manuel Spartan
If you have nothing else than the access log try lorg with phpids, or replay the access log to a local apache with crs and a rewrite rule to reply 200ok and look at the error log for the interesting stuff as Christian said Good luck! Sent from my iPhone > On 31 Jan 2019, at 14:06, Christian

Re: [Owasp-modsecurity-core-rule-set] is there any tool to analyse apache access logs against CRS?

2019-01-31 Thread Christian Folini
Hi there, The information you are looking for is not in the access log, but in the error or the audit log. I you look through my tutorials at https://netnea.com, you will find a few techniques and scripts that help you with the task at hand. Otherwise, the JWall Audit Console does a pretty good

[Owasp-modsecurity-core-rule-set] is there any tool to analyse apache access logs against CRS?

2019-01-31 Thread Shrinivasan T
Hello CRS Team, Thanks for the great works. I am looking for a tool to analyse my apache access logs against CRS to get report on any XSS/CSRF/etc issues. Is there any tool to do this? Thanks. -- Regards, T.Shrinivasan My Life with GNU/Linux : http://goinggnu.wordpress.com Free E-Magazine