Christoph - Security Blog

Install NGINX with ModSecurity on Debian 11 (Bullseye)

Recently I decided to switch from NAXSI Web Application Firewall to ModSecurity. Not that I was unhappy with NAXSI - in opposite - everything went smooth. But NAXSI receives little support from the open source community. So I decided to go with the quasi standard. With this blog post I

bookreview

The Imposter's Handbook

vi The Imposter's Handbook The Imposter's Handbook covers many areas. The goal of the author was to give an overview about topics discussed while studying Computer Science. Topics discussed are among others: Computation Complexity Big O Data Structures Algorithms Compilation Software Design Patterns Functional Programming Databases Essential Unix The

Azure and Pulumi

Get started with Infrastructure as Code (IaC) using python and Pulumi.

security

Configuring NAXSI (WAF)

in my previous post the installation of NGINX and NAXSI was described. After successful installation it is time to start the configuration. as a first step copy core rules, to Nginx config directory. Configring NGINX sudo /src/naxsi-0.56/naxsi_config/naxsi_core.rules /etc/nginx/ than create your specific

security

Securing your WebApp with NGINX and NAXSI on Debian 10 (buster)

This website is running the free version of Ghost CMS. To increase the security of the website a NGINX reverse proxy including NAXSI web application firewall (WAF) is used. NAXSI (NGINX Anti XSS & SQL Injection) is a free, third-party NGINX module which complements the webserver with security functionalities. The