This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Projects/OWASP NAXSI Project"

From OWASP
Jump to: navigation, search
Line 20: Line 20:
 
| leader_username1 = Thibault Koechlin
 
| leader_username1 = Thibault Koechlin
  
| contributor_name1 =  
+
| contributor_name1 = Sebastien Blot
 
| contributor_email1 =  
 
| contributor_email1 =  
 
| contributor_username1 =  
 
| contributor_username1 =  
  
| contributor_name2 =  
+
| contributor_name2 = Antonin Lefaucheux
 
| contributor_email2 =  
 
| contributor_email2 =  
 
| contributor_username2 =  
 
| contributor_username2 =  
  
| contributor_name3 =  
+
| contributor_name3 = Didier Conchaudron
 
| contributor_email3 =  
 
| contributor_email3 =  
 
| contributor_username3 =
 
| contributor_username3 =

Revision as of 15:04, 6 September 2011

PROJECT INFO
What does this OWASP project offer you?
RELEASE(S) INFO
What releases are available for this project?
what is this project?
Name: OWASP NAXSI Project (Nginx Anti Xss Sql Injection) (home page)
Purpose:
  • Naxsi is an open source, high performance, low rules maintenance, Web Application Firewall module for Nginx, the infamous web server and reverse-proxy.
  • Its goal is to help people securing their web applications against attacks like SQL Injections, Cross Site Scripting, Cross Site Request Forgery, Local & Remote file inclusions.
  • The difference with most WAF (Web Application Firewalls) out there is that it does not rely upon signatures to detect and block attacks. It uses a simpler model where, instead of trying to detect "known" attacks, it detects unexpected characters in the HTTP requests/arguments.
  • Each kind of unusual character will increase the score of the request. If the request reaches a score considered "too high", the request will be denied, and the user will be redirected to a "forbidden" page. Yes, it works somewhat like a spam system.
License: GPL 2.0
who is working on this project?
Project Leader(s):
Project Contributor(s):
  • Sebastien Blot
  • Antonin Lefaucheux
  • Didier Conchaudron
how can you learn more?
Project Pamphlet: Not Yet Created
Project Presentation:
Mailing list: N/A
Project Roadmap: View
Main links:
Key Contacts
current release
Not Yet Published
last reviewed release
Not Yet Reviewed


other releases