The Cyber Security and Privacy Foundation (CSPF), a non-profit organization that provides solutions for security, privacy, and cyber threats ,has developed a set of rules to protect servers from malicious hackers.
These rules have been transformed into safety rules for the public , as Manish Tanwar and Suriya Prakash of CSPF wrote .
However, the OWASP Core Rule Set (CRS), a project that aims to provide general rules that will be easily applied to an attack and will promote the level of protection for any web application, has resolved various types of vulnerabilities and other vulnerabilities but has failed to protect the "backdoor" in attacks and recent bypasses.
So the CSPF rules are aimed at protecting against recent bypasses and backdoors. Everything is now set up to deliver the rules to the public.
According to the organization, the rules can be very easily expanded.
We present to you the functions of the rules:
- Rules can block third-party access to sensitive files and folders.
- Rules can block b374k shell variants along with some other popular shells.
- The rules disable directory listing and phpinfo.
- Rules block SQL Injection:
- Normal SQL Injection
- Blind and time-based SQL Injection
- as well as all SQLI types
