owasp Archives - ITFROMZERO - Share tobe shared!

Installing ModSecurity + OWASP CRS on Nginx: Building an Open-Source WAF for Comprehensive Website Protection

By IT From Zero November 8, 2026

A step-by-step guide to installing ModSecurity with the OWASP Core Rule Set on Nginx to build an open-source Web Application Firewall. Effectively block SQL injection, XSS, and path traversal at zero cost, with practical guidance on handling false positives.

Security

Library Vulnerability Scanning with OWASP Dependency-Check: Don’t Let It Backfire

By IT From Zero August 30, 2026

Don't let third-party libraries become your project's Achilles' heel. A detailed guide on using OWASP Dependency-Check for vulnerability scanning and CI/CD integration.

Security

Common Security Vulnerabilities in AI Code Assistants and How to Detect Them Automatically

By IT From Zero March 7, 2026

AI code assistants like Copilot and ChatGPT boost productivity, but they also introduce security vulnerabilities that code review tends to miss — SQL injection, command injection, hardcoded credentials, and more. This article breaks down the 5 most common issues with code examples, and walks you through setting up an automated scanning pipeline with Bandit, Semgrep, and TruffleHog.