Home / Courses
Free course · English

Basic Web Application Firewall with ModSecurity

Learn to install, configure, and test ModSecurity for small websites

8 lessons about 6 hours beginner certificate
Basic Web Application Firewall with ModSecurity

This short course is for Indian students and career switchers who want a practical security skill that can be added to a resume. You'll set up ModSecurity on Apache/Nginx, write simple rule sets, and test the firewall against common attacks.

By the end of the course you'll have a working WAF protecting a demo site and a collection of reusable rules you can adapt for any small web project.

After completing the course you’ll be able to install ModSecurity, tune rules, interpret logs, and explain WAF benefits to clients or employers.

What you will work through

1 Introduction to Web Application Firewalls F5 DevCentral Community · 10 min 2 Installing ModSecurity on Apache HackerSploit · 21 min 3 Installing ModSecurity on Nginx HackerSploit · 30 min 4 Understanding the OWASP Core Rule Set (CRS) nullcon · 44 min 5 Creating a Simple Custom Rule – SQL Injection MivoCloud · 4 min 6 Hands‑On Project: Protect a Demo Site HackerSploit · 21 min 7 Tuning Rules and Reducing False Positives Taylor Walton · 15 min 8 Monitoring, Logging, and Reporting Techno Tim · 28 min
Final project Secure a Demo Blog with ModSecurity Unlocks after all 8 lessons 0 of 8 lessons passed Locked
Final project

Secure a Demo Blog with ModSecurity

Submit a public GitHub repo Checked by a reviewer Unlimited attempts Needed for the certificate

Create a small blog site (e.g., WordPress or a static site) behind ModSecurity on Apache or Nginx. Submit a GitHub repository link containing:

  • The web server configuration files
  • Your custom ModSecurity rule set
  • A short README explaining how to deploy and test the firewall

Reviewer checklist

  • ModSecurity installed and enabled
  • At least three custom rules covering SQLi, XSS, and file inclusion
  • Log files show blocked attacks from the test suite
  • Clear documentation for setup and testing
  • Clean commit history and organized folder structure
Sign in to take partYour progress and project are saved to your account.
Sign in
The teaching videos are made by independent creators and play from YouTube, with the creator credited on every lesson. Nexgino builds the path, the notes, the project and the certificate.
8 lessons · free Start free