199 Open source projects that are alternatives of or similar to waf-brain

Framework for Testing WAFs (FTW!)

OWASP Coraza middleware for Caddy. It provides Web Application Firewall capabilities

No description or website provided.

Deploy, update, and stage your WAFs while managing them centrally via FMS.

A web-based testing platform for WAF (Web Application Firewall)'s correctness

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…

Sqreen's Application Security Management for the Go language

Curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.

A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration.

A sandbox to protect your pwn challenges being pwned in CTF AWD.

High-performance WAF built on the OpenResty stack

Collection of quality safety articles. Awesome articles.

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。

http interceptor to hoomanize cloudflare requests

Web Application Firewall (WAF) on Kubernetes

🖤 网络安全与渗透测试工具导航

AliGuard PHP WAF

A botwall for Java web applications

completely ridiculous API (crAPI)

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

Web interface for managing Haproxy, Nginx and Keepalived servers

Code-Audit-Challenges

Analysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF.

JXWAF(锦衣盾)是一款开源web应用防火墙

Blazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF .

Tesla is a gateway service that provides dynamic routing,waf,support spring cloud,gRPC,DUBBO and more.

The repo contains all the slide deck that was used during my presentation at various webinars, conferences, and meetups.

The Waf DotNetPad is a simple and fast code editor that makes fun to program with C# or Visual Basic.

Additional Resources For Securing The Stack Tutorials

CIDRAM: Classless Inter-Domain Routing Access Manager.

An application to catch, search and analyze HTTP secure headers.

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

OWASP Code Review Guide Web Repository

A powerful PHP WAF for AWD

🚦Web Application Firewall or API Gateway(应用防火墙/API网关)

A Terraform module to create AWF WAF Rules for OWASP Top 10 security risks protection.

Raptor - WAF - Web application firewall using DFA [ Current version ] - Beta

BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦---burpsuite-pro burpsuite-extender burpsuite cracked-version hackbar hacktools fuzzing fuzz-testing burp-plugin burp-extensions bapp-store brute-force-attacks brute-force-passwords waf sqlmap jar

Development repository for nginx-more package

xWAF 3.0 - Free Web Application Firewall, Open-Source.

An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.

Wafid identify and fingerprint Web Application Firewall (WAF) products.

apache 2.x.x module, for CSRF mitigation

ModSecurity v3 Nginx Connector

Security Knowledge Structure(安全知识汇总)

Janusec Application Gateway, Provides Fast and Secure Application Delivery. JANUSEC应用网关，提供快速、安全的应用交付。

Kubernetes Ingress controller with integrated Wallarm services

TeaWeb-可视化的Web代理服务。DEMO: http://teaos.cn:7777

An NGINX and ModSecurity based Web Application Firewall for Docker

Web security protection system based on openresty

The official PHP SDK for Shieldfy

Web Application Firewall (WAF) package for Laravel

🔥Open source RASP solution

Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.

A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques

Run Capture the Flags and Security Trainings with OWASP Juice Shop

Detect and bypass web application firewalls and protection systems

A collection of bash shell scripts for automating various tasks with Amazon Web Services using the AWS CLI and jq.

OWASP Raider: a novel framework for manipulating the HTTP processes of persistent sessions