waf

There are 50 repositories under waf topic.

chaitin / SafeLine
一款足够简单、足够好用、足够强的免费 WAF。基于业界领先的语义引擎检测技术，作为反向代理接入，保护你的网站不受黑客攻击。 A free WAF that is sufficiently simple, effective, and powerful. Utilizing industry-leading semantic engine detection technology, it operates as a reverse proxy to protect your website from hacker attacks.
acl cc firewall http-flood security security-tools sql-injection waf web-application-firewall web-security xss captcha docker modsecurity nginx
Language:C++ 8962
owasp-modsecurity / ModSecurity
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
modsecurity nginx apache apache2 waf
Language:C++ 7666
0xInfection / Awesome-WAF
🔥 Web-application firewalls (WAFs) from security standpoint.
waf web-application-firewall firewall awesome-list awesome waf-bypass waf-detection waf-test waf-testing waf-fingerprints bypass-waf infosec security
Language:Python 5962
EnableSecurity / wafw00f
WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
waf fingerprint waffit web-application-firewall
Language:Python 4911
nbs-system / naxsi
NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
c naxsi nginx waf
Language:C 4774
trimstray / htrace.sh
My simple Swiss Army knife for http/https troubleshooting and profiling.
https-troubleshoting http-requests httptracer redirect-urls testing-tools security-tools debugging-tools swissarmyknife mozilla-observatory ssllabs-scan nmap nmap-scripts testssl waf sublist3r
Language:Shell 3712
bunkerweb
bunkerity / bunkerweb
🛡️ Make your web services secure by default !
antibot bunkerized-nginx cybersecurity devops devsecops dnsbl docker hardening hosting kubernetes letsencrypt modsecurity nginx reverse-proxy security security-tuning swarm waf web-application-firewall web-security
Language:Python 3515
padrino / padrino-framework
Padrino is a full-stack ruby framework built upon Sinatra.
padrino ruby waf
Language:Ruby 3365
Mr-xn / BurpSuite-collections
有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file
burpsuite burpsuite-extender burpsuite-tools hacktool pentesting pentest-tool burp-extensions hackbar j2eescan sqlmap waf jar burp-requests python-burp burpsuite-xkeys shiro-burp sendto burpsuite-java
Language:HTML 3080
baidu / openrasp
🔥Open source RASP solution
devsecops iast rasp security waf
Language:C++ 2706
Ekultek / WhatWaf
Detect and bypass web application firewalls and protection systems
bypass firewall web-application detection waf fingerprinting web-application-firewall-bypassing web-application-firewall
Language:Python 2528
tom0li / collection-document
Collection of quality safety articles. Awesome articles.
dns pentest list security sec hacking src bug-bounty fuzz xss research github waf java hacker redteam bounty-hunters web cloud awesome
1979
coraza
corazawaf / coraza
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
coraza waf coraza-waf owasp-crs modsecurity coreruleset owasp golang go http web-application-firewall hacktoberfest
Language:Go 1853
al0ne / Vxscan
python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。
python python3 portscan tools pentest scan-tool security-tools waf fingerprint directory-scanning port-scanning poc-scanning website-fingerprint cdn detection fingerprint-recognition-error identification
Language:Python 1720
ADD-SP / ngx_waf
Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块
nginx nginx-modules web-application-firewall waf modsecurity modsecurity-nginx openresty captcha hcaptcha recaptcha
Language:C 1454
owasp-modsecurity / ModSecurity-nginx
ModSecurity v3 Nginx Connector
modsecurity nginx modsecurity-nginx nginx-connector waf libmodsecurity
Language:Perl 1436
wallarm / gotestwaf
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
owasp api-security security bugbounty security-tools waf web-application-security web-application-firewall security-testing graphql-security grpc-security rest-security
Language:Go 1419
roxy-wi / roxy-wi
Web interface for managing Haproxy, Nginx, Apache and Keepalived servers
haproxy-servers web-interface management web-manager web-gui gui webui haproxy-configuration haproxy-status haproxy-gui haproxy-managment high-availibility loadbalancer lbs waf nginx keepalived-servers monitoring roxy-wi apache
Language:HTML 1409
FWGS / xash3d-fwgs
Xash3D FWGS engine.
xash3d-fwgs xash3d-engine waf crossplatform
Language:C 1406
p0pr0ck5 / lua-resty-waf
High-performance WAF built on the OpenResty stack
lua-resty-waf lua nginx-lua modsecurity waf openresty
Language:Perl 1255
swoodford / aws
A collection of bash shell scripts for automating various tasks with Amazon Web Services using the AWS CLI and jq.
aws awscli amazon ec2 s3 elb cloudfront cloudwatch iam route53 vpc waf terraform bash shell aws-cli cidr json jq infrastructure-as-code
Language:Shell 1134
nemesida-waf / waf-bypass
Check your WAF before an attacker does
waf python3 bypass python rce xss waf-bypass-tool api-security-testing lfi nosql-injection path-traversal rfi sqli-injection graphql-injection ssti waf-testing
Language:Python 1115
Janusec / janusec
JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。
waf web-application-firewall application-gateway load-balance gateway application-security golang security web-application-security sql-injection janusec-application-gateway web-ssh janusec port-forwarding acme k8s-ingress-controller cookie-banner gslb cookie-compliance
Language:Go 1109
nillerusr / source-engine
Modified source engine (2017) developed by valve and leaked in 2020. Not for commercial purporses
cross-platform game-engine half-life2 source-engine waf
Language:C++ 1065
jx-sec / jxwaf
JXWAF(锦衣盾)是一款开源web应用防火墙
jxwaf nginx-lua openresty waf
Language:Lua 1031
TeaOSLab / EdgeAdmin
CDN & WAF集群管理系统。
golang cdn waf proxy dns http2 reverseproxy ipv6 tcp udp http3 webp
Language:JavaScript 990
CHYbeta / Code-Audit-Challenges
Code-Audit-Challenges
audit-challenges ctf nodejs php python security sql waf
965
akaunting / laravel-firewall
Web Application Firewall (WAF) package for Laravel
akaunting blacklist firewall laravel php security waf whitelist
Language:PHP 897
TeaWeb / build
TeaWeb-可视化的Web代理服务。DEMO: http://teaos.cn:7777
api fastcgi golang http2 log monitor proxy server statistics visualization waf web
Language:Go 765
titansec / OpenWAF
Web security protection system based on openresty
waf openresty nginx lua web nginx-lua openwaf web-application-firewall cc http-flood
Language:C 744
curiefense
curiefense / curiefense
Curiefense is a unified, open source platform protecting cloud native applications.
envoyproxy waf botmanagement ddos cloud-native microservices security rate-limiter ddos-protection session bot-management cncf
Language:Rust 715
wallarm / awesome-nginx-security
🔥 A curated list of awesome links related to application security related to the environments with NGINX or Kubernetes Ingres Controller (based on NGINX)
nginx modsecurity waf naxsi awesome-list awesome-lists security webserver load-balancer nginx-security nginx-server mod-security nginx-environment nginx-configuration kubernetes application-security api-security apigateway
695
jbe2277 / waf
Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
waf dotnet csharp wpf uwp mvvm architectural-patterns framework xamarin android ios maui winui
Language:C# 694
nccgroup / BurpSuiteHTTPSmuggler
A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
waf bypass burpsuite burpsuite-extender
Language:Java 686
openappsec / openappsec
open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
api-security application-security kubernetes nginx web-application-firewall appsec devsecops kong rate-limiting security-tools threat-prevention waf owasp owasp-top-ten nginx-proxy-manager
Language:C++ 683
chengdedeng / waf
:vertical_traffic_light:Web Application Firewall or API Gateway(应用防火墙/API网关)
firewall http-proxy littleproxy security waf
Language:Java 672

waf

chaitin / SafeLine

owasp-modsecurity / ModSecurity

0xInfection / Awesome-WAF

EnableSecurity / wafw00f

nbs-system / naxsi

trimstray / htrace.sh

bunkerity / bunkerweb

padrino / padrino-framework

Mr-xn / BurpSuite-collections

baidu / openrasp

Ekultek / WhatWaf

tom0li / collection-document

corazawaf / coraza

al0ne / Vxscan

ADD-SP / ngx_waf

owasp-modsecurity / ModSecurity-nginx

wallarm / gotestwaf

roxy-wi / roxy-wi

FWGS / xash3d-fwgs

p0pr0ck5 / lua-resty-waf

swoodford / aws

nemesida-waf / waf-bypass

Janusec / janusec

nillerusr / source-engine

jx-sec / jxwaf

TeaOSLab / EdgeAdmin

CHYbeta / Code-Audit-Challenges

akaunting / laravel-firewall

TeaWeb / build

titansec / OpenWAF

curiefense / curiefense

wallarm / awesome-nginx-security

jbe2277 / waf

nccgroup / BurpSuiteHTTPSmuggler

openappsec / openappsec

chengdedeng / waf