coreruleset repositories

53 repositories

coreruleset
Public
OWASP CRS (Official Repository)
security waf owasp
security waf owasp ruleset crs
Python
•
Apache License 2.0
•470•3.3k•73•37•Updated Oct 6, 2026Oct 6, 2026
website
Public
CRS Website files
website hugo hugo-site
website hugo hugo-site crs
HTML
•9•1•3•2•Updated Oct 6, 2026Oct 6, 2026
project-seaweed
Public
Testing CVEs against CRS
waf owasp cve-scanning
waf owasp cve-scanning core-rule-set
Go
•
Apache License 2.0
•2•10•2•0•Updated Oct 6, 2026Oct 6, 2026
documentation
Public
CRS Documentation
hugo crs
hugo crs
JavaScript
•23•6•6•5•Updated Oct 5, 2026Oct 5, 2026
project-chat-archive
Public
Archive of the CRS project's monthly chats
Python
•1•0•0•0•Updated Oct 5, 2026Oct 5, 2026
secrules_parsing
Public
A parser for the SecRules Langue
Python
•
Apache License 2.0
•9•23•2•5•Updated Oct 5, 2026Oct 5, 2026
modsecurity-crs-docker
Public
Official ModSecurity Docker + Core Rule Set (CRS) images
docker modsecurity modsecurity-core-rule-set
docker modsecurity modsecurity-core-rule-set core-rule-set
Dockerfile
•
Apache License 2.0
•88•449•8•4•Updated Oct 5, 2026Oct 5, 2026
coraza-crs-docker
Public
Coraza, CRS and Apache/Caddy/Nginx
nginx apache owasp
nginx apache owasp coraza-waf owasp-crs
Shell
•7•15•1•0•Updated Oct 5, 2026Oct 5, 2026
crs-linter
Public
Rules checker and linter for the CRS project
Python
•
Apache License 2.0
•3•4•5•2•Updated Oct 5, 2026Oct 5, 2026
seclang_parser
Public
ANTLR based SecLang parser
antlr4 antlr4-grammar seclang
antlr4 antlr4-grammar seclang
Python
•
Apache License 2.0
•5•4•1•1•Updated Oct 5, 2026Oct 5, 2026
go-ftw
Public
Web Application Firewall Testing Framework - Go version
testing waf testing-tools
testing waf testing-tools
Go
•
Apache License 2.0
•39•184•13•3•Updated Oct 5, 2026Oct 5, 2026
wordpress-rule-exclusions-plugin
Public
Rule exclusion plugin for WordPress.
wordpress crs crs-plugin
wordpress crs crs-plugin
Apache License 2.0
•10•33•1•0•Updated Oct 4, 2026Oct 4, 2026
plugin-registry
Public
Registry for OWASP CRS plugins, official and 3rd party
waf owasp crs
waf owasp crs crs-plugin
Python
•13•53•9•3•Updated Oct 4, 2026Oct 4, 2026
drupal-rule-exclusions-plugin
Public
Rule exclusion plugin for Drupal
Apache License 2.0
•4•5•1•0•Updated Oct 3, 2026Oct 3, 2026
phpmyadmin-rule-exclusions-plugin
Public
Rule exclusion plugin for phpMyAdmin.
crs crs-plugin
crs crs-plugin
Apache License 2.0
•6•1•1•1•Updated Oct 3, 2026Oct 3, 2026
coderabbit
Public
Centralized coderabbit instructions repo
0•0•1•1•Updated Oct 2, 2026Oct 2, 2026
body-decompress-plugin
Public
This is a plugin that brings on-the-fly decompression of RESPONSE_BODY to CRS.
Lua
•
Apache License 2.0
•5•1•2•4•Updated Oct 2, 2026Oct 2, 2026
database-logging-plugin
Public
This is a plugin that brings database logging to CRS.
Lua
•
Apache License 2.0
•0•0•0•0•Updated Oct 1, 2026Oct 1, 2026
antivirus-plugin
Public
This is a plugin that brings antivirus support to CRS.
Lua
•
Apache License 2.0
•4•9•0•0•Updated Oct 1, 2026Oct 1, 2026
false-positive-report-plugin
Public
Lua
•
Apache License 2.0
•1•2•0•0•Updated Oct 1, 2026Oct 1, 2026
crs-toolchain
Public
The Swiss army knife for CRS developers
tools crs
tools crs
Go
•
Apache License 2.0
•6•14•6•6•Updated Sep 28, 2026Sep 28, 2026
traffic-observation-plugin
Public
This is an offical CRS plugin that logs information about requests that is not normally logged.
Shell
•
Apache License 2.0
•1•4•1•2•Updated Sep 23, 2026Sep 23, 2026
nextcloud-rule-exclusions-plugin
Public
Rule exclusion plugin for Nextcloud
nextcloud crs crs-plugin
nextcloud crs crs-plugin
Apache License 2.0
•10•45•3•1•Updated Sep 22, 2026Sep 22, 2026
dokuwiki-rule-exclusions-plugin
Public
Rule exclusion plugin for DokuWiki
Apache License 2.0
•1•1•0•0•Updated Sep 22, 2026Sep 22, 2026
referer-hardening-plugin
Public
Apache License 2.0
•2•1•0•0•Updated Sep 21, 2026Sep 21, 2026
crs-plugin-test-action
Public
GitHub Action workflows to test plugins
plugin crs github-actions
plugin crs github-actions
Apache License 2.0
•1•1•1•1•Updated Sep 21, 2026Sep 21, 2026
machine-learning-integration-plugin
Public
A CRS plugin to use machine learning together with the rule set.
Lua
•
Apache License 2.0
•4•10•5•5•Updated Sep 20, 2026Sep 20, 2026
xenforo-rule-exclusions-plugin
Public
Rule exclusion plugin for XenForo
Apache License 2.0
•2•0•1•2•Updated Sep 20, 2026Sep 20, 2026
cpanel-rule-exclusions-plugin
Public
Rule exclusion plugin for cPanel
Apache License 2.0
•2•0•1•1•Updated Sep 20, 2026Sep 20, 2026
homebrew-tap
Public
Official Homebrew tap for OWASP CRS tools (crs-toolchain and related utilities).
Ruby
•
Apache License 2.0
•1•0•0•0•Updated Sep 20, 2026Sep 20, 2026

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

Navigation Menu

CRS Project

All

53 repositories

coreruleset

website

project-seaweed

documentation

project-chat-archive

secrules_parsing

modsecurity-crs-docker

coraza-crs-docker

crs-linter

seclang_parser

go-ftw

wordpress-rule-exclusions-plugin

plugin-registry

drupal-rule-exclusions-plugin

phpmyadmin-rule-exclusions-plugin

coderabbit

body-decompress-plugin

database-logging-plugin

antivirus-plugin

false-positive-report-plugin

crs-toolchain

traffic-observation-plugin

nextcloud-rule-exclusions-plugin

dokuwiki-rule-exclusions-plugin

referer-hardening-plugin

crs-plugin-test-action

machine-learning-integration-plugin

xenforo-rule-exclusions-plugin

cpanel-rule-exclusions-plugin

homebrew-tap

Repositories list

53 repositories