<metapackage xmlns:os="http://opensuse.org/Standards/One_Click_Install" xmlns="http://opensuse.org/Standards/One_Click_Install">
<group distversion="SUSE Linux Enterprise Server 15">
    <name>SUSE Package Hub 15 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-15-Standard-Pool</name>
        <summary>Package Hub 15</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  <group distversion="SUSE Linux Enterprise Desktop 15">
    <name>SUSE Package Hub 15 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-15-Standard-Pool</name>
        <summary>Package Hub 15</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  <group distversion="SUSE Linux Enterprise Server 15 SP1">
    <name>SUSE Package Hub 15 SP1 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-15-SP1-Backports-Pool</name>
        <summary>Package Hub 15 SP1</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  <group distversion="SUSE Linux Enterprise Desktop 15 SP1">
    <name>SUSE Package Hub 15 SP1 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-15-SP1-Backports-Pool</name>
        <summary>Package Hub 15 SP1</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  <group distversion="SUSE Linux Enterprise Server 15 SP2">
    <name>SUSE Package Hub 15 SP2 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-15-SP2-Backports-Pool</name>
        <summary>Package Hub 15 SP2</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  <group distversion="SUSE Linux Enterprise Desktop 15 SP2">
    <name>SUSE Package Hub 15 SP2 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-15-SP2-Backports-Pool</name>
        <summary>Package Hub 15 SP2</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  <group distversion="SUSE Linux Enterprise Server 15 SP3">
    <name>SUSE Package Hub 15 SP3 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-15-SP3-Backports-Pool</name>
        <summary>Package Hub 15 SP3</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  <group distversion="SUSE Linux Enterprise Desktop 15 SP3">
    <name>SUSE Package Hub 15 SP3 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-15-SP3-Backports-Pool</name>
        <summary>Package Hub 15 SP3</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  <group distversion="SUSE Linux Enterprise Server 15 SP4">
    <name>SUSE Package Hub 15 SP4 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-15-SP4-Backports-Pool</name>
        <summary>Package Hub 15 SP4</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  <group distversion="SUSE Linux Enterprise Desktop 15 SP4">
    <name>SUSE Package Hub 15 SP4 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-15-SP4-Backports-Pool</name>
        <summary>Package Hub 15 SP4</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  <group distversion="SUSE Linux Enterprise Server 15 SP5">
    <name>SUSE Package Hub 15 SP5 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-15-SP5-Standard-Pool</name>
        <summary>Package Hub 15 SP5</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  <group distversion="SUSE Linux Enterprise Desktop 15 SP5">
    <name>SUSE Package Hub 15 SP5 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-15-SP5-Standard-Pool</name>
        <summary>Package Hub 15 SP5</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  <group distversion="SUSE Linux Enterprise Server 15 SP6">
    <name>SUSE Package Hub 15 SP6 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-15-SP6-Standard-Pool</name>
        <summary>Package Hub 15 SP6</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  <group distversion="SUSE Linux Enterprise Desktop 15 SP6">
    <name>SUSE Package Hub 15 SP6 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-15-SP6-Standard-Pool</name>
        <summary>Package Hub 15 SP6</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  <group distversion="SUSE Linux Enterprise Server 15 SP7">
    <name>SUSE Package Hub 15 SP7 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-15-SP7-Standard-Pool</name>
        <summary>Package Hub 15 SP7</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  <group distversion="SUSE Linux Enterprise Desktop 15 SP7">
    <name>SUSE Package Hub 15 SP7 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-15-SP7-Standard-Pool</name>
        <summary>Package Hub 15 SP7</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  <group distversion="SUSE Linux Enterprise Server 16.0">
    <name>SUSE Package Hub 16.0 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-16.0-Standard-Pool</name>
        <summary>Package Hub 16.0</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  <group distversion="SUSE Linux Enterprise Desktop 16.0">
    <name>SUSE Package Hub 16.0 one-click install</name>
    <summary>Install owasp-modsecurity-crs</summary>
    <description>
    NOTE: This one-click installation requires that the SUSE Package Hub extension to already be enabled.
See http://packagehub.suse.com/how-to-use/ for information on enabling the Package Hub extension

If the extension is not enabled, this installation will fail while trying to enable an invalid repo.

This package might depend on packages from SUSE Linux Enterprise modules. If those modules are not enabled, a package dependency error will be encountered.
    </description>
    <repositories>
      <repository recommended="true">
        <name>SUSE-PackageHub-16.0-Standard-Pool</name>
        <summary>Package Hub 16.0</summary>
        <description>Dummy repo - this will fail</description>
        <url></url>
      </repository>
    </repositories>
    <software>
      <item>
        <name>owasp-modsecurity-crs</name>
        <summary>OWASP ModSecurity Common Rule Set (CRS)</summary>
        <description>ModSecurity™ is a web application firewall engine that provides very little protection on its own. In order to become useful, ModSecurity™ must be configured with rules. In order to enable users to take full advantage of ModSecurity™ out of the box, Trustwave&#x27;s SpiderLabs is providing a free certified rule set for ModSecurity™ 2.x. Unlike intrusion detection and prevention systems, which rely on signatures specific to known vulnerabilities, the Core Rules provide generic protection from unknown vulnerabilities often found in web applications, which are in most cases custom coded. The Core Rules are heavily commented to allow it to be used as a step-by-step deployment guide for ModSecurity™.

Core Rules Content

In order to provide generic web applications protection, the Core Rules use the following techniques:

HTTP Protection - detecting violations of the HTTP protocol and a locally defined usage policy.
Real-time Blacklist Lookups - utilizes 3rd Party IP Reputation
Web-based Malware Detection - identifies malicious web content by check against the Google Safe Browsing API.
HTTP Denial of Service Protections - defense against HTTP Flooding and Slow HTTP DoS Attacks.
Common Web Attacks Protection - detecting common web application security attack.
Automation Detection - Detecting bots, crawlers, scanners and other surface malicious activity.
Integration with AV Scanning for File Uploads - detects malicious files uploaded through the web application.
Tracking Sensitive Data - Tracks Credit Card usage and blocks leakages.
Trojan Protection - Detecting access to Trojans horses.
Identification of Application Defects - alerts on application misconfigurations.
Error Detection and Hiding - Disguising error messages sent by the server.</description>
      </item>
    </software>
  </group>
  </metapackage>