Live ModSecurity Challenges at Blackhat Arsenal

Change theme to light

July 28, 2011

2 Minute Read

by Ryan Barnett

ModSecurity is participating in the upcoming Blackhat Arsenal Tools Demo next week in Las Vegas.

Details:

When: Wed. Aug 3rd from 1:45 pm - 4:30 pm

Where: POD 1

We will have live demos/challenges running from our kiosk. In addition to the SQL Injection Challenges, we will also have a great XSS Challenge as outlined below.

So if you are going to be at Blackhat, we encourage you to stop by Arsenal and try your hand at bypassing these protections.

XSS Defense with ModSecurity

The purpose of this demo is to show possible XSS defenses by using ModSecurity.

XSS Defense #1: JS Sandbox

This defensive layer uses ModSecurity's Content Injection capability to insert defensive Javascript to the beginning of html responses. This demo uses Eduardo (sirdarckcat) Vela's Active Content Signatures (ACS) code.

XSS Defense #2: Neutralizing Reflected Payloads

This defensive technique uses ModSecurity rules to look for suspicious inbound payloads reflected back out to clients in the response body.

Read more about using ModSecurity's ability to identify improper output handling flaws here.

If a payload is found, then ModSecurity will use its new data substitution capabilities to alter the outbound html. It will do two things:

Prepend a JavaScript alert pop-up box warning the user that a security action has been taken on the response payload.
The malicious payload will be prepended with the HTML tag thus neutralizing the malicious payload.&amp;lt;/li&amp;gt; &amp;lt;/ul&amp;gt; &amp;lt;p&amp;gt;Here is &amp;lt;a href="http://www.modsecurity.org/demo/demo-deny-noescape.html?test=%3Cinput+onfocus%3Dwrite%281%29+autofocus%3E&amp;amp;disable_xss_defense=on" target="_self"&amp;gt;an example attack with defense&amp;lt;/a&amp;gt;.&amp;lt;/p&amp;gt; &amp;lt;h4&amp;gt;Demo Challenge&amp;lt;/h4&amp;gt; &amp;lt;p&amp;gt;Your challenge is to try and bypass both the JS sandbox and PLAINTEXT protections and successfully execute a reflected XSS attack that executes JS code in your browser. You may toggle On/Off the defenses by checking the boxes in the form below. This will help to facilitate testing of working XSS payloads.&amp;lt;/p&amp;gt; &amp;lt;p&amp;gt;If you are successful, please notify us at any of the following places:&amp;lt;/p&amp;gt; &amp;lt;p&amp;gt;- &amp;lt;a href="http://twitter.com/modsecurity" target=" blank"&amp;gt;@ModSecurity on Twitter&amp;lt;/a&amp;gt;&amp;lt;/p&amp;gt; &amp;lt;p&amp;gt;- &amp;lt;a href="https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set" target="_blank" rel="noopener"&amp;gt;OWASP ModSecurity Core Rule Set Mail-list&amp;lt;/a&amp;gt;&amp;lt;/p&amp;gt; &amp;lt;p&amp;gt;- &amp;lt;a href="https://www.modsecurity.org/tracker/browse/CORERULES" target="_blank" rel="noopener"&amp;gt;Submit bug report to Jira&amp;lt;/a&amp;gt;&amp;lt;/p&amp;gt; &amp;lt;p&amp;gt;&amp;nbsp;&amp;lt;/p&amp;gt; &lt;/plaintext&gt;&lt;/li&gt; &lt;/ul&gt;&lt;/span&gt; &lt;/div&gt; &lt;/div&gt; &lt;aside class="lb-blog-details__siderail"&gt; &lt;div class="lb-blog-details__siderail-sticky"&gt; &lt;div class="lb-blog-details__share"&gt; &lt;p class="lb-text--small"&gt;Share:&lt;/p&gt; &lt;div class="lb-blog-details__share-icons lb-share-icons"&gt; &lt;div class="lb-share-copy--wrapper"&gt; &lt;a class="lb-share-icon lb-share-icon--copy-link" href="https://www.levelblue.com/blogs/spiderlabs-blog/live-modsecurity-challenges-at-blackhat-arsenal" rel="noopener"&gt;&lt;/a&gt; &lt;span class="lb-copied-link"&gt;Link Copied&lt;/span&gt; &lt;/div&gt; &lt;a class="lb-share-icon lb-share-icon--linkedin" href="https://www.linkedin.com/shareArticle?mini=true&amp;url=https://www.levelblue.com/blogs/spiderlabs-blog/live-modsecurity-challenges-at-blackhat-arsenal" target="_blank" rel="noopener"&gt;&lt;/a&gt; &lt;a class="lb-share-icon lb-share-icon--lb-x" href="https://x.com/intent/post?url=&amp;text=https://www.levelblue.com/blogs/spiderlabs-blog/live-modsecurity-challenges-at-blackhat-arsenal&amp;via=LevelBlueCyber" target="_blank" rel="noopener"&gt;&lt;/a&gt; &lt;a class="lb-share-icon lb-share-icon--facebook" href="https://www.facebook.com/sharer/sharer.php?u=https://www.levelblue.com/blogs/spiderlabs-blog/live-modsecurity-challenges-at-blackhat-arsenal" target="_blank" rel="noopener"&gt;&lt;/a&gt; &lt;/div&gt; &lt;/div&gt; &lt;div class="lb-blog-details__subscribe"&gt; &lt;div class="lb-blog-details__subscribe-desktop"&gt; &lt;h4 class="lb-blog-details__subscribe-title"&gt;Stay Informed&lt;/h4&gt; &lt;p class="lb-blog-details__subscribe-desc"&gt; Sign up to receive the latest security news and trends straight to your inbox from LevelBlue. &lt;/p&gt; &lt;div class="lb-blog-details__subscribe-form"&gt; &lt;div id="lb-form-68741a11-8e56-4f23-ba7f-b2307e77714c-278" class="lb-form_target" data-form-priority="eager"&gt;&lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;div class="lb-blog-details__subscribe-mobile"&gt; &lt;p class="lb-text--small"&gt;Stay Informed:&lt;/p&gt; &lt;a class="lb-blog-details__subscribe-btn lb-btn lb-btn--primary" href="#popup-subscribe"&gt; Subscribe &lt;/a&gt; &lt;div id="popup-subscribe" class="lb-popup" role="dialog" aria-modal="true" aria-hidden="true"&gt; &lt;div class="lb-popup_wrapper"&gt; &lt;button title="Close (Esc)" type="button" class="lb-popup_close" aria-label="Close"&gt;×&lt;/button&gt; &lt;div class="lb-popup_body"&gt; &lt;h4 class="lb-blog-details__subscribe-title"&gt;Stay Informed&lt;/h4&gt; &lt;p class="lb-blog-details__subscribe-desc"&gt; Sign up to receive the latest security news and trends straight to your inbox from LevelBlue.&lt;br&gt; &lt;/p&gt; &lt;div id="lb-form-68741a11-8e56-4f23-ba7f-b2307e77714c-586" class="lb-form_target" &gt;&lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;div class="lb-blog-details__resources"&gt; &lt;div class="lb-module lb-blog_featured-resources lb-blog-details__feat-resources"&gt; &lt;a class="lb-blog-details__feat-resource lb-link-card" href="https://levelblue.com/resources/research-reports/levelblue-threat-trends-report-2025-edition-two/" &gt; &lt;div class="lb-link-card__label lb-text--eyebrow"&gt; RESEARCH REPORT &lt;/div&gt; &lt;h4 class="lb-link-card__title"&gt;&lt;span&gt; 2025 LevelBlue Threat Trends Report, Edition Two &lt;/span&gt;&lt;/h4&gt; &lt;/a&gt; &lt;a class="lb-blog-details__feat-resource lb-link-card" href="https://levelblue.com/resources/webinars/how-cybercriminals-are-perfecting-deception-in-2025/" &gt; &lt;div class="lb-link-card__label lb-text--eyebrow"&gt; WEBINAR &lt;/div&gt; &lt;h4 class="lb-link-card__title"&gt;&lt;span&gt; Fool Me Once: How Cybercriminals are Perfecting Deception &lt;/span&gt;&lt;/h4&gt; &lt;/a&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;/aside&gt; &lt;/div&gt; &lt;div class="lb-blog-details__about"&gt; &lt;div class="lb-blog-details__authors"&gt; &lt;div class="lb-blog-details__author-bio lb-rich-text"&gt; &lt;p class="lb-blog-details__author-title lb-text--eyebrow"&gt; About LevelBlue &lt;/p&gt; &lt;p class="lb-blog-details__author-desc lb-text--small"&gt; LevelBlue secures what's next with intelligence-led security delivering visibility and speed to stop threats faster. As the world’s largest and most analyst-recognized pure-play managed security services provider, our AI-powered managed services and cyber expertise across managed, advisory, and incident response services help clients operate with confidence. Learn more &lt;a href="https://www.levelblue.com/company/about-us"&gt;about us&lt;/a&gt;. &lt;/p&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;div class="dnd-section"&gt; &lt;div class="row-fluid"&gt; &lt;div class="span12"&gt; &lt;div id="hs_cos_wrapper_module_178606156357619" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style="" data-hs-cos-general-type="widget" data-hs-cos-type="module" &gt; &lt;div class="lb-module lb-rel-resources "&gt; &lt;h2 class="lb-rel-resources__title"&gt; Latest Intelligence &lt;/h2&gt; &lt;div class="lb-rel-resources__grid"&gt; &lt;a class="lb-rel-resources__card" href="https://www.levelblue.com/blogs/spiderlabs-blog/expanding-the-attack-surface-analyzing-nightmare-eclipses-latest-pocs" title="Expanding the Attack Surface: Analyzing Nightmare-Eclipse's Latest PoCs"&gt; &lt;div class="lb-rel-resources__card-icon"&gt; &lt;img class="" src="https://www.levelblue.com/hubfs/lb-web/wireframe-objects/lb-wireframes_globe--light.svg" alt="Globe" loading="lazy" width="88" height="88"/&gt; &lt;/div&gt; &lt;div class="lb-rel-resources__card-content"&gt; &lt;div class="lb-rel-resources__card-label lb-text--eyebrow"&gt; &lt;/div&gt; &lt;h4 class="lb-rel-resources__card-title"&gt; Expanding the Attack Surface: Analyzing Nightmare-Eclipse's Latest PoCs &lt;/h4&gt; &lt;/div&gt; &lt;/a&gt; &lt;a class="lb-rel-resources__card" href="https://www.levelblue.com/blogs/spiderlabs-blog/still-circling-inside-the-operator-behind-blind-eagles-github-loader" title="Still Circling: Inside the Operator Behind Blind Eagle's GitHub Loader"&gt; &lt;div class="lb-rel-resources__card-icon"&gt; &lt;img class="" src="https://www.levelblue.com/hubfs/lb-web/wireframe-objects/lb-wireframes_diamond--light.svg" alt="Diamond" loading="lazy" width="88" height="88"/&gt; &lt;/div&gt; &lt;div class="lb-rel-resources__card-content"&gt; &lt;div class="lb-rel-resources__card-label lb-text--eyebrow"&gt; &lt;/div&gt; &lt;h4 class="lb-rel-resources__card-title"&gt; Still Circling: Inside the Operator Behind Blind Eagle's GitHub Loader &lt;/h4&gt; &lt;/div&gt; &lt;/a&gt; &lt;a class="lb-rel-resources__card" href="https://www.levelblue.com/blogs/spiderlabs-blog/energy-disruption-in-uk-critical-infrastructure-and-the-growing-ot-cyber-threat" title="Energy Disruption in UK Critical Infrastructure and the Growing OT Cyber Threat"&gt; &lt;div class="lb-rel-resources__card-icon"&gt; &lt;img class="" src="https://www.levelblue.com/hubfs/lb-web/wireframe-objects/lb-wireframes_plus--light.svg" alt="Oval Rounded Plus" loading="lazy" width="104.36" height="88"/&gt; &lt;/div&gt; &lt;div class="lb-rel-resources__card-content"&gt; &lt;div class="lb-rel-resources__card-label lb-text--eyebrow"&gt; &lt;/div&gt; &lt;h4 class="lb-rel-resources__card-title"&gt; Energy Disruption in UK Critical Infrastructure and the Growing OT Cyber Threat &lt;/h4&gt; &lt;/div&gt; &lt;/a&gt; &lt;/div&gt; &lt;/div&gt;&lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;div class="dnd-section"&gt; &lt;div class="row-fluid"&gt; &lt;div class="span12"&gt; <div id="hs_cos_wrapper_module_17225404242263" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style="" data-hs-cos-general-type="widget" data-hs-cos-type="module" > <div id="module_17225404242263" class="lb-module lb-related-offerings lb-related-offerings--details "> <h3 class="lb-related-offerings__title"> Related Offerings </h3> <div class="lb-related-offerings__list"> <a class="lb-related-offerings__item lb-btn lb-btn--tertiary" href="https://levelblue.com/services/penetration-testing/"> Penetration Testing </a> <a class="lb-related-offerings__item lb-btn lb-btn--tertiary" href="https://levelblue.com/services/incident-readiness-and-response/"> Incident Readiness and Response </a> <a class="lb-related-offerings__item lb-btn lb-btn--tertiary" href="https://levelblue.com/services/cyber-threat-intelligence/"> Cyber Threat Intelligence </a> <a class="lb-related-offerings__item lb-btn lb-btn--tertiary" href="https://levelblue.com/services/threat-hunting/"> Threat Hunting </a> </div> </div></div> &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;div class="minified-final-plea dnd-section"&gt; &lt;div class="row-fluid"&gt; &lt;div id="hs_cos_wrapper_module_17863861840419" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style="" data-hs-cos-general-type="widget" data-hs-cos-type="module" &gt; &lt;div class="lb-module lb-minified-finalplea lb--dark"&gt; &lt;h4 style="color: #FFF !important;"&gt; Discover how our specialists can tailor a security program to fit the needs of &lt;br&gt; your organization. &lt;/h4&gt; &lt;a href="#popup-blogfinalplea" title="Request a Demo" class="lb-btn lb-btn--primary"&gt;Request a Demo&lt;/a&gt; &lt;/div&gt; &lt;div id="popup-blogfinalplea" class="lb-popup" role="dialog" aria-modal="true" aria-hidden="true"&gt; &lt;div class="lb-popup_wrapper"&gt; &lt;button title="Close (Esc)" type="button" class="lb-popup_close" aria-label="Close"&gt;×&lt;/button&gt; &lt;div class="lb-popup_body"&gt; &lt;div id="lb-form-be28fb83-5e9f-4da9-8132-5ee9008b9f31-606" class="lb-form_target" &gt;&lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;/article&gt; &lt;/main&gt; &lt;div id="hs_cos_wrapper_module_178220248127619" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style="" data-hs-cos-general-type="widget" data-hs-cos-type="module" &gt; &lt;div class="lb-footer lb--light"&gt; &lt;div class="lb-container"&gt; &lt;div class="lb-footer__wrapper"&gt; &lt;div class="lb-footer__left-col"&gt; &lt;h3 class="lb-footer__title"&gt; Stay Informed &lt;/h3&gt; &lt;div class="lb-footer__desc"&gt; Sign up to receive the latest security news and trends straight to your inbox from LevelBlue. &lt;/div&gt; &lt;div class="lb-footer__form"&gt; &lt;div id="lb-form-68741a11-8e56-4f23-ba7f-b2307e77714c-205" class="lb-form_target" &gt;&lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;div class="lb-foter__separator"&gt;&lt;/div&gt; &lt;div class="lb-footer__right-col"&gt; &lt;div class="lb-footer__menu"&gt; &lt;div class="lb-footer__menu-col"&gt; &lt;div id="hs_menu_wrapper_module_178220248127619_" class="hs-menu-wrapper active-branch flyouts hs-menu-flow-horizontal" role="navigation" data-sitemap-name="" data-menu-id="" aria-label="Navigation Menu"&gt; &lt;ul role="menu"&gt; &lt;li class="hs-menu-item hs-menu-depth-1" role="none"&gt;&lt;a href="https://www.levelblue.com/services" role="menuitem" target="_self"&gt;View All Services&lt;/a&gt;&lt;/li&gt; &lt;li class="hs-menu-item hs-menu-depth-1" role="none"&gt;&lt;a href="https://www.levelblue.com/company/our-history" role="menuitem" target="_self"&gt;Our History&lt;/a&gt;&lt;/li&gt; &lt;li class="hs-menu-item hs-menu-depth-1" role="none"&gt;&lt;a href="https://www.levelblue.com/newsroom/press-releases" role="menuitem" target="_self"&gt;Press Releases&lt;/a&gt;&lt;/li&gt; &lt;li class="hs-menu-item hs-menu-depth-1" role="none"&gt;&lt;a href="https://www.levelblue.com/newsroom/media-coverage" role="menuitem" target="_self"&gt;Media Coverage&lt;/a&gt;&lt;/li&gt; &lt;/ul&gt; &lt;/div&gt; &lt;/div&gt; &lt;div class="lb-footer__menu-col"&gt; &lt;div id="hs_menu_wrapper_module_178220248127619_" class="hs-menu-wrapper active-branch flyouts hs-menu-flow-horizontal" role="navigation" data-sitemap-name="" data-menu-id="" aria-label="Navigation Menu"&gt; &lt;ul role="menu"&gt; &lt;li class="hs-menu-item hs-menu-depth-1" role="none"&gt;&lt;a href="https://www.levelblue.com/company/careers" role="menuitem" target="_self"&gt;Careers&lt;/a&gt;&lt;/li&gt; &lt;li class="hs-menu-item hs-menu-depth-1" role="none"&gt;&lt;a href="https://www.levelblue.com/company/contact" role="menuitem" target="_self"&gt;Contact&lt;/a&gt;&lt;/li&gt; &lt;li class="hs-menu-item hs-menu-depth-1" role="none"&gt;&lt;a href="https://www.levelblue.com/submit-rfp" role="menuitem" target="_self"&gt;Submit RFP&lt;/a&gt;&lt;/li&gt; &lt;li class="hs-menu-item hs-menu-depth-1" role="none"&gt;&lt;a href="https://www.levelblue.com/free-trials" role="menuitem" target="_self"&gt;Free Trials&lt;/a&gt;&lt;/li&gt; &lt;/ul&gt; &lt;/div&gt; &lt;/div&gt; &lt;div class="lb-footer__menu-col"&gt; &lt;div id="hs_menu_wrapper_module_178220248127619_" class="hs-menu-wrapper active-branch flyouts hs-menu-flow-horizontal" role="navigation" data-sitemap-name="" data-menu-id="" aria-label="Navigation Menu"&gt; &lt;ul role="menu"&gt; &lt;li class="hs-menu-item hs-menu-depth-1" role="none"&gt;&lt;a href="https://www.levelblue.com/training-and-certification" role="menuitem" target="_self"&gt;Training &amp;amp; Certification&lt;/a&gt;&lt;/li&gt; &lt;li class="hs-menu-item hs-menu-depth-1" role="none"&gt;&lt;a href="https://www.levelblue.com/company/support" role="menuitem" target="_self"&gt;Support&lt;/a&gt;&lt;/li&gt; &lt;li class="hs-menu-item hs-menu-depth-1" role="none"&gt;&lt;a href="https://success.levelblue.com/s/" role="menuitem" target="_blank" rel="noopener"&gt;Success Center&lt;/a&gt;&lt;/li&gt; &lt;li class="hs-menu-item hs-menu-depth-1" role="none"&gt;&lt;a href="https://docs.levelblue.com/documentation" role="menuitem" target="_blank" rel="noopener"&gt;Documentation Center&lt;/a&gt;&lt;/li&gt; &lt;/ul&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;div class="lb-footer__bottom"&gt; &lt;div class="lb-footer__share lb-share-icons"&gt; &lt;a class="lb-share-icon lb-share-icon--linkedin" href="https://www.linkedin.com/company/levelbluecyber/" target="_blank" rel="noopener"&gt;&lt;/a&gt; &lt;a class="lb-share-icon lb-share-icon--lb-x" href="https://twitter.com/levelbluecyber" target="_blank" rel="noopener"&gt;&lt;/a&gt; &lt;a class="lb-share-icon lb-share-icon--youtube" href="https://www.youtube.com/c/attcybersecurity" target="_blank" rel="noopener"&gt;&lt;/a&gt; &lt;/div&gt; &lt;div class="lb-footer__legal-menu"&gt; &lt;div id="hs_menu_wrapper_module_178220248127619_" class="hs-menu-wrapper active-branch flyouts hs-menu-flow-horizontal" role="navigation" data-sitemap-name="" data-menu-id="" aria-label="Navigation Menu"&gt; &lt;ul role="menu"&gt; &lt;li class="hs-menu-item hs-menu-depth-1" role="none"&gt;&lt;a href="https://www.levelblue.com/legal" role="menuitem" target="_self"&gt;Legal&lt;/a&gt;&lt;/li&gt; &lt;li class="hs-menu-item hs-menu-depth-1" role="none"&gt;&lt;a href="https://www.levelblue.com/legal/website-terms-of-use" role="menuitem" target="_self"&gt;Terms of Usage&lt;/a&gt;&lt;/li&gt; &lt;li class="hs-menu-item hs-menu-depth-1" role="none"&gt;&lt;a href="https://www.levelblue.com/legal/privacy-policy" role="menuitem" target="_self"&gt;Privacy Policy&lt;/a&gt;&lt;/li&gt; &lt;li class="hs-menu-item hs-menu-depth-1" role="none"&gt;&lt;a href="https://www.levelblue.com/legal/choices-and-controls" role="menuitem" target="_self"&gt;Your Privacy Choices&lt;/a&gt;&lt;/li&gt; &lt;/ul&gt; &lt;/div&gt; &lt;/div&gt; &lt;div class="lb-footer__copyright"&gt;© Copyright 2026&lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;!-- Mobile CTA Button --&gt; &lt;div class="lb-footer__mobile-cta lb--dark"&gt; &lt;a class="lb-btn lb-btn--primary" href="#popup-global" title="Footer PopUp"&gt; Request a Demo &lt;/a&gt; &lt;/div&gt; &lt;!-- Mobile PopUp --&gt; &lt;div id="popup-global" class="lb-popup" role="dialog" aria-modal="true" aria-hidden="true"&gt; &lt;div class="lb-popup_wrapper"&gt; &lt;button title="Close (Esc)" type="button" class="lb-popup_close" aria-label="Close"&gt;×&lt;/button&gt; &lt;div class="lb-popup_body"&gt; &lt;div id="lb-form-0ba582d8-a14e-4ce6-9ec3-def133446115-555" class="lb-form_target" &gt;&lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt; &lt;/div&gt;&lt;/div&gt; &lt;/div&gt; &lt;!-- HubSpot performance collection script --&gt; &lt;script defer src="/hs/hsstatic/content-cwv-embed/static-1.1293/embed.js"&gt;&lt;/script&gt; &lt;script defer src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.slim.min.js"&gt;&lt;/script&gt; &lt;script defer src="//21158977.fs1.hubspotusercontent-na1.net/hubfs/21158977/hub_generated/template_assets/1/215096042770/1788824640997/template_main.min.js"&gt;&lt;/script&gt; &lt;script&gt; var hsVars = hsVars || {}; hsVars['language'] = 'en'; &lt;/script&gt; &lt;script src="/hs/hsstatic/cos-i18n/static-1.53/bundles/project.js"&gt;&lt;/script&gt; &lt;script src="https://21158977.fs1.hubspotusercontent-na1.net/hubfs/21158977/hub_generated/module_assets/1/215671531520/1787247673444/module_lb-head.min.js"&gt;&lt;/script&gt; &lt;script&gt; window.hsFormsOnReady = window.hsFormsOnReady || []; window.hsFormsOnReady.push(function() { hbspt.forms.create({ region: 'na1', portalId: "21158977", formId: "92358282-9e9e-4fe6-a21f-c30c1e55336d", target: "#lb-form-92358282-9e9e-4fe6-a21f-c30c1e55336d-345", response_type: "inline", sfdcCampaignId: "", message: "&lt;p style=\x22text\-align: center;\x22&gt;&lt;strong&gt;Thank you.&lt;\/strong&gt;&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;A solution specialist will be in touch shortly.&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;&lt;strong&gt;&lt;img src=\x22https:\/\/21158977.fs1.hubspotusercontent\-na1.net\/hubfs\/21158977\/lb\-web\/graphic\-elements\/thankyou\-separator\-\-blue.png\x22 width=\x22258\x22 height=\x2222\x22 loading=\x22lazy\x22 alt=\x22thankyou\-separator\-\-blue\x22 style=\x22height: auto; max\-width: 100%; width: 258px;\x22&gt;&lt;\/strong&gt;&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;Browse our latest &lt;span style=\x22color: #0096b3;\x22&gt;&lt;a style=\x22color: #0096b3;\x22 href=\x22https:\/\/www.levelblue.com\/blogs\/levelblue\-blog\x22 rel=\x22noopener\x22&gt;blogs&lt;\/a&gt;&lt;\/span&gt; or visit our &lt;span style=\x22color: #0096b3;\x22&gt;&lt;a style=\x22color: #0096b3;\x22 href=\x22https:\/\/www.levelblue.com\/resources\x22 rel=\x22noopener\x22&gt;Resource Library&lt;\/a&gt;&lt;\/span&gt;.&lt;\/p&gt;", }); }); &lt;/script&gt; &lt;script&gt; window.hsFormsOnReady = window.hsFormsOnReady || []; window.hsFormsOnReady.push(function() { hbspt.forms.create({ region: 'na1', portalId: "21158977", formId: "68741a11-8e56-4f23-ba7f-b2307e77714c", target: "#lb-form-68741a11-8e56-4f23-ba7f-b2307e77714c-278", response_type: "inline", sfdcCampaignId: "", message: "&lt;p&gt;Thank you for your email! You will soon receive the LevelBlue newsletter.&lt;\/p&gt;", }); }); &lt;/script&gt; &lt;script&gt; window.hsFormsOnReady = window.hsFormsOnReady || []; window.hsFormsOnReady.push(function() { hbspt.forms.create({ region: 'na1', portalId: "21158977", formId: "68741a11-8e56-4f23-ba7f-b2307e77714c", target: "#lb-form-68741a11-8e56-4f23-ba7f-b2307e77714c-586", response_type: "inline", sfdcCampaignId: "", message: "&lt;p&gt;Thank you for your email! You will soon receive the LevelBlue newsletter.&lt;\/p&gt;", }); }); &lt;/script&gt; &lt;script src="https://21158977.fs1.hubspotusercontent-na1.net/hubfs/21158977/hub_generated/module_assets/1/219203973212/1787610279643/module_lb-blog-featured-resources.min.js"&gt;&lt;/script&gt; &lt;script&gt; window.hsFormsOnReady = window.hsFormsOnReady || []; window.hsFormsOnReady.push(function() { hbspt.forms.create({ region: 'na1', portalId: "21158977", formId: "be28fb83-5e9f-4da9-8132-5ee9008b9f31", target: "#lb-form-be28fb83-5e9f-4da9-8132-5ee9008b9f31-606", response_type: "inline", sfdcCampaignId: "", message: "&lt;p style=\x22text\-align: center;\x22&gt;\x26nbsp;&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;\x26nbsp;&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;&lt;strong&gt;Thank You&lt;\/strong&gt;&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;One of our sales specialists will be in touch with you shortly.&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;&lt;img src=\x22https:\/\/21158977.fs1.hubspotusercontent\-na1.net\/hubfs\/21158977\/lb\-web\/graphic\-elements\/thankyou\-separator\-\-blue.png\x22 style=\x22height: auto; max\-width: 100%; width: 258px;\x22 alt=\x22thankyou\-separator\-\-blue\x22 loading=\x22lazy\x22 width=\x22258\x22 height=\x2222\x22&gt;&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;Browse our latest &lt;span style=\x22color: #0096b3;\x22&gt;&lt;a href=\x22https:\/\/www.levelblue.com\/blogs\/levelblue\-blog\x22 rel=\x22noopener\x22 style=\x22color: #0096b3;\x22&gt;blogs&lt;\/a&gt;&lt;\/span&gt; or visit our &lt;span style=\x22color: #0096b3;\x22&gt;&lt;a href=\x22https:\/\/www.levelblue.com\/resources\x22 rel=\x22noopener\x22 style=\x22color: #0096b3;\x22&gt;Resource Library&lt;\/a&gt;&lt;\/span&gt;.&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;\x26nbsp;&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;\x26nbsp;&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;\x26nbsp;&lt;\/p&gt;", }); }); &lt;/script&gt; &lt;script&gt; (function() { var nameEQ = "theme="; var ca = document.cookie.split(';'); var savedTheme = null; for (var i = 0; i &lt; ca.length; i++) { var c = ca[i].trim(); if (c.indexOf(nameEQ) == 0) savedTheme = c.substring(nameEQ.length, c.length); } var theme = savedTheme || 'dark'; document.documentElement.classList.add(theme + '-theme'); var style = document.createElement('style'); style.innerHTML = 'body { visibility: hidden !important; } .theme-initialized body { visibility: visible !important; }'; document.head.appendChild(style); })(); &lt;/script&gt; &lt;script&gt; (function() { var html = document.documentElement; var body = document.body; var main = document.querySelector('main#main-content'); function updateVisuals(theme) { var navHead = document.querySelector('.lb-head'); if (theme === 'dark') { main.classList.remove('lb--light'); main.classList.add('lb--dark'); if (navHead) navHead.classList.remove('lb-light-nav'); if (typeof window.update_logo === "function") window.update_logo(false); /* Support to legacy code */ body.classList.remove('light-theme'); body.classList.add('dark-theme'); } else { main.classList.remove('lb--dark'); main.classList.add('lb--light'); if (navHead) navHead.classList.add('lb-light-nav'); if (typeof window.update_logo === "function") window.update_logo(true); /* Support to legacy code */ body.classList.remove('dark-theme'); body.classList.add('light-theme'); } } var currentTheme = html.classList.contains('dark-theme') ? 'dark' : 'light'; updateVisuals(currentTheme); html.classList.add('theme-initialized'); function onReady(fn) { if (document.readyState === 'loading') document.addEventListener('DOMContentLoaded', fn); else fn(); } onReady(function () { document.querySelectorAll('a.lb-blog-details__hero-switch').forEach(function (link) { link.addEventListener('click', function (e) { e.preventDefault(); var newTheme = document.querySelector('main#main-content').classList.contains('lb--dark') ? 'light' : 'dark'; document.cookie = "theme=" + newTheme + "; path=/; SameSite=Lax"; updateVisuals(newTheme); }); }); var article = document.querySelector('article.lb-blog-details'); if (article) article.classList.remove('elem-hidden'); body.classList.add('blog-detail-template', 'theme-transition'); }); })(); &lt;/script&gt; &lt;script&gt; (function() { function onReady(fn) { if (document.readyState === 'loading') document.addEventListener('DOMContentLoaded', fn); else fn(); } onReady(function() { var isDesktop = window.matchMedia("(min-width: 1024px)").matches; var stickyEl = document.querySelector('.lb-blog-details__siderail-sticky'); if (isDesktop &amp;&amp; stickyEl) { window.stickToParent(stickyEl, 135); // mirror plugin's 'is_stuck' into 'stuck_elem' for existing CSS hooks var mo = new MutationObserver(function() { stickyEl.classList.toggle('stuck_elem', stickyEl.classList.contains('is_stuck')); }); mo.observe(stickyEl, { attributes: true, attributeFilter: ['class'] }); } else if (!isDesktop) { var metadata = document.querySelector('.lb-metadata'); var socialShare = document.querySelector('.lb-blog-details__share'); if (metadata &amp;&amp; socialShare &amp;&amp; socialShare.parentNode) { socialShare.parentNode.insertBefore(metadata, socialShare); } } }); })(); &lt;/script&gt; &lt;script&gt; window.hsFormsOnReady = window.hsFormsOnReady || []; window.hsFormsOnReady.push(function() { hbspt.forms.create({ region: 'na1', portalId: "21158977", formId: "68741a11-8e56-4f23-ba7f-b2307e77714c", target: "#lb-form-68741a11-8e56-4f23-ba7f-b2307e77714c-205", response_type: "inline", sfdcCampaignId: "", message: "Thank you for your email! You will soon receive the LevelBlue newsletter", }); }); &lt;/script&gt; &lt;script&gt; window.hsFormsOnReady = window.hsFormsOnReady || []; window.hsFormsOnReady.push(function() { hbspt.forms.create({ region: 'na1', portalId: "21158977", formId: "0ba582d8-a14e-4ce6-9ec3-def133446115", target: "#lb-form-0ba582d8-a14e-4ce6-9ec3-def133446115-555", response_type: "inline", sfdcCampaignId: "", message: "&lt;p style=\x22text\-align: center;\x22&gt;\x26nbsp;&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;\x26nbsp;&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;&lt;strong&gt;Thank You&lt;\/strong&gt;&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;One of our sales specialists will be in touch with you shortly.\x26nbsp;&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;&lt;img src=\x22https:\/\/21158977.fs1.hubspotusercontent\-na1.net\/hubfs\/21158977\/lb\-web\/graphic\-elements\/thankyou\-separator\-\-blue.png\x22 width=\x22258\x22 height=\x2222\x22 loading=\x22lazy\x22 alt=\x22thankyou\-separator\-\-blue\x22 style=\x22height: auto; max\-width: 100%; width: 258px;\x22&gt;&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;Browse our latest &lt;span style=\x22color: #0096b3;\x22&gt;&lt;a style=\x22color: #0096b3;\x22 href=\x22https:\/\/www.trustwave.com\/en\-us\/resources\/blogs\/trustwave\-blog\/\x22 rel=\x22noopener\x22&gt;blogs&lt;\/a&gt;&lt;\/span&gt; or visit our &lt;span style=\x22color: #0096b3;\x22&gt;&lt;a style=\x22color: #0096b3;\x22 href=\x22https:\/\/www.trustwave.com\/en\-us\/resources\/library\/\x22 rel=\x22noopener\x22&gt;Resource Library&lt;\/a&gt;&lt;\/span&gt;.&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;\x26nbsp;&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;\x26nbsp;&lt;\/p&gt;\n&lt;p style=\x22text\-align: center;\x22&gt;\x26nbsp;&lt;\/p&gt;", }); }); &lt;/script&gt; &lt;!-- $$__SECOND_PASS_JS_FOOTER__$$ --&gt; &lt;!-- Start of HubSpot Analytics Code --&gt; &lt;script type="text/javascript"&gt; var _hsq = _hsq || []; _hsq.push(["setContentType", "blog-post"]); _hsq.push(["setCanonicalUrl", "https:\/\/www.levelblue.com\/blogs\/spiderlabs-blog\/live-modsecurity-challenges-at-blackhat-arsenal"]); _hsq.push(["setPageId", "202118667031"]); _hsq.push(["setContentMetadata", { "contentPageId": 202118667031, "legacyPageId": "202118667031", "contentFolderId": null, "contentGroupId": 199456657586, "abTestId": null, "languageVariantId": 202118667031, "languageCode": "en", }]); &lt;/script&gt; &lt;script type="text/javascript" id="hs-script-loader" async defer src="/hs/scriptloader/21158977.js"&gt;&lt;/script&gt; &lt;!-- End of HubSpot Analytics Code --&gt; &lt;script type="text/javascript"&gt; var hsVars = { render_id: "70ebc3df-5dfe-4c62-b15e-77a2cd43a455", ticks: 1789265960092, page_id: 202118667031, content_group_id: 199456657586, portal_id: 21158977, app_hs_base_url: "https://app.hubspot.com", cp_hs_base_url: "https://cp.hubspot.com", language: "en", analytics_page_type: "blog-post", scp_content_type: "", analytics_page_id: "202118667031", category_id: 3, folder_id: 0, is_hubspot_user: false } &lt;/script&gt; &lt;script defer src="/hs/hsstatic/HubspotToolsMenu/static-1.640/js/index.js"&gt;&lt;/script&gt; &lt;div id="fb-root"&gt;&lt;/div&gt; &lt;script&gt;(function(d, s, id) { var js, fjs = d.getElementsByTagName(s)[0]; if (d.getElementById(id)) return; js = d.createElement(s); js.id = id; js.src = "//connect.facebook.net/en_GB/sdk.js#xfbml=1&amp;version=v3.0"; fjs.parentNode.insertBefore(js, fjs); }(document, 'script', 'facebook-jssdk'));&lt;/script&gt; &lt;script&gt;!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src="https://platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");&lt;/script&gt; &lt;/body&gt; &lt;/html&gt;</plaintext></li></ul></span></div></div></div></div></div></div></article></main></div></body></html></plaintext></li></ul></span></div></div></div></div></div></div></article></main></div></body></html>