{"id":36245,"date":"2019-10-31T22:10:28","date_gmt":"2019-10-31T19:10:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novyj-bild-nemesida-waf-free-dlya-nginx\/"},"modified":"2019-10-31T22:10:28","modified_gmt":"2019-10-31T19:10:28","slug":"novyj-bild-nemesida-waf-free-dlya-nginx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx","title":{"rendered":"Nov\u00fd build Nemesida WAF Free pre NGINX","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Nov\u00fd build Nemesida WAF Free pre NGINX\" src=\"\/wp-content\/uploads\/2019\/07\/6d684f498688b4aab26911f30c0394d6.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nMinul\u00fd rok sme vydali Nemesida WAF Free \u2014 dynamick\u00fd modul pre NGINX, ktor\u00fd blokuje \u00fatoky na webov\u00e9 aplik\u00e1cie. Na rozdiel od komer\u010dnej verzie zalo\u017eenej na strojovom u\u010den\u00ed, bezplatn\u00e1 verzia analyzuje po\u017eiadavky len signat\u00farnou met\u00f3dou.<\/p>\n<h3>Vlastnosti vydania Nemesida WAF 4.0.129<\/h3>\n<p>\nDo aktu\u00e1lneho vydania dynamick\u00fd modul Nemesida WAF podporoval len Nginx Stable 1.12, 1.14 a 1.16. V novom vydan\u00ed bola pridan\u00e1 podpora Nginx Mainline po\u010dn\u00fac 1.17 a Nginx Plus po\u010dn\u00fac 1.15.10 (R18).<\/p>\n<h3>Pre\u010do vytv\u00e1ra\u0165 \u010fal\u0161\u00ed WAF?<\/h3>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nNAXSI a mod_security s\u00fa pravdepodobne najpopul\u00e1rnej\u0161ie bezplatn\u00e9 moduly WAF, pri\u010dom mod_security je akt\u00edvne propagovan\u00e9 Nginx, hoci p\u00f4vodne sa pou\u017e\u00edvalo len v Apache2. Obe rie\u0161enia s\u00fa bezplatn\u00e9, maj\u00fa otvoren\u00fd zdrojov\u00fd k\u00f3d a mno\u017estvo pou\u017e\u00edvate\u013eov po celom svete. Pre mod_security s\u00fa k dispoz\u00edcii bezplatn\u00e9 a komer\u010dn\u00e9 sady signat\u00far, za 500 dol\u00e1rov ro\u010dne, pre NAXSI \u2014 bezplatn\u00e1 sada signat\u00far \u201ez krabice\u201c, m\u00f4\u017eete tie\u017e n\u00e1js\u0165 \u010fal\u0161ie sady pravidiel, ako napr\u00edklad doxsi.<\/p>\n<p>Tento rok sme testovali v\u00fdkon NAXSI a Nemesida WAF Free. Skra\u010dme v\u00fdsledky:<\/p>\n<ul>\n<li>NAXSI nevykon\u00e1va dvojit\u00fd URL-dek\u00f3dovanie v cookie<\/li>\n<li>NAXSI je ve\u013emi zlo\u017eit\u00fd na nastavenie \u2014 \u0161tandardn\u00e9 nastavenia pravidiel predvolene zablokuj\u00fa v\u00e4\u010d\u0161inu pr\u00edstupov pri pr\u00e1ci s webovou aplik\u00e1ciou (autoriz\u00e1cia, \u00faprava profilu alebo obsahu, \u00fa\u010dast na prieskumoch a pod.) a je potrebn\u00e9 generova\u0165 zoznamy v\u00fdnimiek, \u010do negat\u00edvne vpl\u00fdva na bezpe\u010dnos\u0165. Nemesida WAF Free pri nastaveniach predvolene nevykonala \u017eiadne falo\u0161n\u00e9 upozornenie po\u010das pr\u00e1ce s webom.<\/li>\n<li>po\u010det prechodov \u00fatokov u NAXSI je nieko\u013ekon\u00e1sobne vy\u0161\u0161\u00ed a pod.<\/li>\n<\/ul>\n<p>\nNapriek nedostatkom maj\u00fa NAXSI a mod_security minim\u00e1lne dve v\u00fdhody \u2014 otvoren\u00fd zdrojov\u00fd k\u00f3d a ve\u013ek\u00e9 mno\u017estvo pou\u017e\u00edvate\u013eov. Podporujeme my\u0161lienku odhalenia zdrojov\u00e9ho k\u00f3du, ale zatia\u013e to nem\u00f4\u017eeme urobi\u0165 kv\u00f4li mo\u017en\u00fdm probl\u00e9mom s \u201epir\u00e1tstvom\u201c komer\u010dnej verzie, ale aby sme kompenzovali tento nedostatok \u2014 \u00faplne odha\u013eujeme obsah sady signat\u00far. Cen\u00edme si d\u00f4vernos\u0165 a pon\u00fakame v\u00e1m to overi\u0165 samostatne pomocou proxy-<a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/server\/dts-los-angeles\/\"   title=\"servera\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3507\">servera<\/a>.<\/p>\n<p>Charakteristika Nemesida WAF Free:<\/p>\n<ul>\n<li>kvalitn\u00e1 z\u00e1klad\u0148a signat\u00far s minim\u00e1lnym po\u010dtom falo\u0161n\u00fdch pozit\u00edv a negat\u00edv.<\/li>\n<li>in\u0161tal\u00e1cia a aktualiz\u00e1cia z repozit\u00e1ra (je to r\u00fdchle a pohodln\u00e9);<\/li>\n<li>jednoduch\u00e9 a preh\u013eadn\u00e9 udalosti incidentov, nie ak\u00fdsi \u201achaos\u2018 ako u NAXSI;<\/li>\n<li>\u00faplne zadarmo, bez obmedzen\u00ed na mno\u017estvo prenosu, virtu\u00e1lnych hostite\u013eov at\u010f.<\/li>\n<\/ul>\n<p>\nNa z\u00e1ver uvediem nieko\u013eko po\u017eiadaviek na hodnotenie v\u00fdkonu WAF (odpor\u00fa\u010da sa pou\u017ei\u0165 vo v\u0161etk\u00fdch oblastiach: URL, ARGS, Hlavi\u010dky &amp; Tel\u00e1):<\/p>\n<p><code>')) un\",\"ion se\",\"lect 1,2,3,4,5,6,7,8,9,0,11#\"]<br \/>\n')) union\/**\/select\/**\/1,\/**\/2,\/**\/3,\/**\/4,\/**\/5,\/**\/6,\/**\/7,\/**\/8,\/**\/9,\/**\/'some_text',\/**\/11#\"]<br \/>\nunion(select(1),2,3,4,5,6,7,8,9,0x70656e746573746974,11)#\"]<br \/>\n')) union+\n\/*!select*\/ (1),(2),(3),(4),(5),(6),(7),(8),(9),(0x70656e746573746974),(11)#\"]<br \/>\n')) *!uion*\\\/ *!seect*\\\/ (1),(2),(3),(4),(5),(6),(7),(8),(9.),(0x70656e746573746974),(11)#\"]<br \/>\n')) **union**select (1),(2),(3),(4),(5),(6),(7),(8),(9),(0x70656e746573746974),(11)#\"]<br \/>\n1807182982union<br \/>\nselect123456789%2some_text11<br \/>\ncat \/et?\/?pa?swd<br \/>\ncat \/et'c\/pas's'wd<br \/>\ncat \/et*\/pa**wd<br \/>\ne'c'ho 'swd test pentest' |awk '{print \"cat \/etc\/pas\"$1}' |bas'h<br \/>\ncat \/etc\/passwd<br \/>\ncat$u+\/etc$u\/passwd$u<br \/>\n&lt;svg\/onload=alert()\/\/<\/code><\/p>\n<p>Ak nebud\u00fa po\u017eiadavky zablokovan\u00e9, potom pravdepodobne WAF prepust\u00ed aj re\u00e1lny \u00fatok. Pred pou\u017eit\u00edm pr\u00edkladov sa uistite, \u017ee WAF nezablokuje legit\u00edmne po\u017eiadavky.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/459976\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u043e\u0434\u0443\u043b\u044c \u0434\u043b\u044f NGINX, \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0435 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f, \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u043d\u044b\u043c \u043c\u0435\u0442\u043e\u0434\u043e\u043c. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0440\u0435\u043b\u0438\u0437\u0430 Nemesida WAF 4.0.129 \u0414\u043e \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0435\u043b\u0438\u0437\u0430 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u043e\u0434\u0443\u043b\u044c Nemesida WAF \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u043b \u0442\u043e\u043b\u044c\u043a\u043e Nginx Stable 1.12, 1.14 \u0438 1.16. \u0412 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27112,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36245","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041d\u043e\u0432\u044b\u0439 \u0431\u0438\u043b\u0434 Nemesida WAF Free \u0434\u043b\u044f NGINX | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:10:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:10:28+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nov\u00e1 verzia Nemesida WAF Free pre NGINX | ProHoster","description":"Minul\u00fd rok sme vydali Nemesida WAF Free -","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u043e\u0432\u044b\u0439 \u0431\u0438\u043b\u0434 Nemesida WAF Free \u0434\u043b\u044f NGINX | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 Nemesida WAF Free \u2014.","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/novyj-bild-nemesida-waf-free-dlya-nginx","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:28+00:00","article:modified_time":"2019-10-31T19:10:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36245","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:36:49","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:48:26","updated":"2026-02-22 15:36:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/36245","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=36245"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/36245\/revisions"}],"predecessor-version":[{"id":162033,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/36245\/revisions\/162033"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/27112"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=36245"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=36245"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=36245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}