web-application-firewall

There are 17 repositories under web-application-firewall topic.

0xInfection / Awesome-WAF
🔥 Web-application firewalls (WAFs) from security standpoint.
waf web-application-firewall firewall awesome-list awesome waf-bypass waf-detection waf-test waf-testing waf-fingerprints bypass-waf infosec security
Language:Python 4944
EnableSecurity / wafw00f
WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
fingerprint waf waffit web-application-firewall
Language:Python 3915
Ekultek / WhatWaf
Detect and bypass web application firewalls and protection systems
bypass firewall web-application detection waf fingerprinting web-application-firewall-bypassing web-application-firewall
Language:Python 2148
ADD-SP / ngx_waf
Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块
nginx nginx-modules web-application-firewall waf modsecurity modsecurity-nginx openresty captcha hcaptcha recaptcha
Language:C 1166
wallarm / gotestwaf
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
owasp api-security security bugbounty security-tools waf web-application-security web-application-firewall security-testing graphql-security grpc-security rest-security
Language:Go 1068
Janusec / Application-Gateway
Janusec Application Gateway, an application security solution which provides ACME HTTPS, K8S Ingress Controller, WAF (Web Application Firewall), CC defense, OAuth2 Authentication and load balancing. Janusec应用网关，提供ACME自动化证书与HTTPS接入、K8S Ingress控制器、WAF (Web Application Firewall)、CC防御、OAuth2身份认证、负载均衡等功能。
waf web-application-firewall application-gateway load-balance gateway application-security golang go security web-application-security sql-injection janusec-application-gateway web-ssh janusec port-forwarding acme brotli k8s-ingress-controller
Language:Go 988
coraza
corazawaf / coraza
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
coraza waf coraza-waf owasp-crs modsecurity coreruleset owasp golang go http web-application-firewall hacktoberfest
Language:Go 870
titansec / OpenWAF
Web security protection system based on openresty
waf openresty nginx lua web nginx-lua openwaf web-application-firewall cc http-flood
Language:C 703
tempesta-tech / tempesta
All-in-one solution for high performance web content delivery and advanced protection against DDoS and web attacks
ddos-mitigation web-application-firewall linux-kernel high-performance http-accelerator load-balancer database tls http2 security
Language:C 559
api-firewall
wallarm / api-firewall
Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.
proxy firewall waf api-gateway apigateway api-wrapper security-tools security api-security api api-firewall openapi-specification openapi swagger openapi-security rest-security api-waf web-application-security web-application-firewall openapi-spec
Language:Go 440
leohearts / awd-watchbird
A powerful PHP WAF for AWD
php awd awd-framework web-application-firewall ctf waf
Language:PHP 389
wafpassproject / wafpass
Analysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF.
waf bypass-methods web-application-firewall analysing-parameters payload
Language:Python 196
Safe3 / uuWAF
一款社区驱动的免费、高性能、高扩展顶级Web应用安全防护产品
waf application-security web-application-firewall modsecurity web-security-gateway
Language:Lua 158
nmmapper / dnsdumpster
A tool to perform DNS reconnaissance on target networks. Among the DNS information got from include subdomains, mx records, web application firewall detection and more fingerprinting and lookups
subdomain subdomain-finder dnsdumpster nmmapper scanners scanner network reconnaissance dns-fingerprinting web-application-firewall dns-reconnaissance detection
Language:Python 147
AvalZ / WAF-A-MoLE
A guided mutation-based fuzzer for ML-based Web Application Firewalls
web web-security web-application-firewall machine-learning adversarial-machine-learning
Language:Python 131
Alemalakra / xWAF
xWAF 3.0 - Free Web Application Firewall, Open-Source.
waf xss vulns-fixed web-application-firewall sqli blockvulns protectwebsite web application firewall php
Language:PHP 60
Janusec / janusec-admin
The Unified Web Administration Portal for Janusec Application Gateway (an application security solution which provides Web Application Firewall, unified web administration portal, private key protection, web routing and scalable load balancing).
application-gateway web-application-firewall waf web-application-security gateway-waf
Language:TypeScript 27
ML-based-WAF
vladan-stojnic / ML-based-WAF
Simple machine learning based web application firewall (WAF) created in python
sqli xss path-traversal sql-injection cross-site-scripting cmdi command-injection parameter-tampering http ml machine-learning svm tf-idf decision-trees waf web-application-firewall python sklearn scapy dash
Language:Jupyter Notebook 26
nemesida-waf / nemesida_waf_free
Nemesida WAF Community Edition
community-edition free-waf-for-nginx nemesida-waf nemesida-waf-ce ngin-free-waf nginx nwaf-dyn waf web-application-firewall
22
NumanABi / webcop-firewall
WebCOP Firewall is advanced and PHP based web application firewall. Doesnt ask for root privileges.
web-application-firewall php security waf
Language:PHP 21
wallarm / docker-wallarm-node
⚡️ Docker official image for Wallarm Node. API security platform agent.
nginx waf security-tools security web-application-firewall api-security rest-security openapi-security envoyproxy security-automation api-firewall application-firewall security-scanner security-audit
Language:Shell 21
corazawaf / coraza-spoa
A wrapper around the OWASP Coraza WAF for HAProxy's SPOE filters
waf coraza haproxy-spoa web-application-firewall haproxy
Language:Go 19
orangemiaw / SimpleWAF
:octocat: SimpleWAF is a simple web application firewall writen using PHP that can send real time attacking report by some actor using Telegram Bot API.
firewall php-firewall php-library php-security security-tools web-application web-application-firewall
Language:PHP 18
reinforchu / NachtWal
Reinforced Mitigation Security Filter
csharp iis windows-server asp-net web-application-firewall xss security
Language:C# 17
riverside / php-waf
:guardsman: PHP Web Application Firewall
firewall web-application-firewall php php-firewall waf webapp-firewall
Language:PHP 15
f5devcentral / f5-agility-labs-waf
F5 Agility Labs for Web Application Firewall Use Cases
documentation training-labs f5-agility-labs f5-asm web-application-firewall web-application-security application-security ddos-mitigation http-proxy security
Language:Shell 14
sudeshnapal12 / Web-Application-Firewall
Designed and Implemented a Web Application Firewall as an Apache module that "sits" in-front of a web server. The WAF is designed to stop malicious requests from known attacks such as SQL Injection, XSS attacks and from unknown attacks by learning the legitimate traffic.
apache web-application-firewall
Language:C 12
paulveillard / cybersecurity-ethical-hacking
An ongoing collection of awesome ethical hacking tools, software, libraries, learning tutorials, frameworks, academic and practical resources
hackathon hacking hackingtools hackerrank-solutions hacking-toolpentest vulnerability-detection vulnerabilities security-tools security-audit cybersecurity cybersecurity-incidents web application web-application-security web-application-security-scanner web-application-firewall
Language:Jupyter Notebook 11
turnerlabs / sigsci_site_manager
Signal Sciences Site Manager
signal-sciences signal-sciences-api web-application-firewall waf devsecops signalsciences sigsci
Language:Python 11
swaf-docker
swaf-project / swaf-docker
A simple Web Application Firewall docker image.
web-application-security web-application-firewall waf docker docker-image nginx modsecurity naxsi owasp crs owasp-crs-core-rule-set core-rule-set swaf nginx-proxy protection dockerfile firewall
Language:Shell 8
jackaduma / AI-WAF
AI driven Web Application Firewall
ai cyber-security cybersecurity deep-learning machine-learning neural-network nlp text-classification textcnn waf web-application-firewall webapplicationfirewall classification-algorithm natural-language-processing nlp-deep-learning nlp-machine-learning
Language:Python 7
3nn10 / CloudDog
CloudDog is a centralized EDR and WAF, it is able to identify and prevent web application attacks, ssh bruteforce and Suspicious shell commands.
cloud-watch-agent cloudwatch ips intrusion-prevention-system centralized-hips aws siem event-correlation-detection waf web-application-firewall anomaly-detection security protection edr antivirus sigma mitre-attack
Language:Python 6
daxio / nginx-naxsi
Official NGINX compiled with NBS System NAXSI
nginx naxsi waf web-application-firewall anti-xss anti-sql-injection xss sql-injection
Language:Dockerfile 6
riotkit-org / wordpress-hardened
Secure and performant Wordpress installation on your Kubernetes cluster
wordpress wordpress-automation wordpress-updater docker docker-compose supervisord hardened kubernetes nginx nonroot-user openshift rootless-containers waf web-application-firewall wordpress-security wordpress-kubernetes multirun p2cli k8s
Language:Shell 6
timokoessler / easy-waf
An easy-to-use Web Application Firewall (WAF) for Node.js. Can be used with Express, Fastify, NextJS, NuxtJS ... or plain Node.js http.
express nodejs security waf web-application-firewall web-application-security javascript mit-license fastify
Language:JavaScript 6
carlosdg / NginxReverseProxyWithModsecurity
NGINX reverse proxy using ModSecurity WAF to protect a web application
nginx waf web-application-firewall modsecurity modsecurity-nginx modsecurity-core-rule-set reverse-proxy nodegoat docker docker-compose owasp owasp-top-10
Language:Dockerfile 5