roxy-wiWeb interface for managing Haproxy, Nginx, Apache and Keepalived servers
Stars: ✭ 1,109 (+2743.59%)
IdentywafBlind WAF identification tool
Stars: ✭ 291 (+646.15%)
terraform-provider-incapsulaThis package is a plugin for Terraform, and is designed to be used to auto-provision sites in Incapsula via Incapsula’s API from the terraform cli/yaml configurations.
Stars: ✭ 27 (-30.77%)
Wafw00fWAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
Stars: ✭ 2,983 (+7548.72%)
Xash3d FwgsXash3D FWGS engine. Rebooted fork since big Xash3D 0.99(1.0 is not yet) update.
Stars: ✭ 337 (+764.1%)
wafbypasserNo description or website provided.
Stars: ✭ 73 (+87.18%)
WafWin Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
Stars: ✭ 539 (+1282.05%)
ingressKubernetes Ingress controller with integrated Wallarm services
Stars: ✭ 31 (-20.51%)
ftwFramework for Testing WAFs (FTW!)
Stars: ✭ 106 (+171.79%)
NaxsiNAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
Stars: ✭ 3,927 (+9969.23%)
nxtool-ngBecause life is too short to waste your time transforming naxsi logs to rules by hand
Stars: ✭ 40 (+2.56%)
Waf🚦Web Application Firewall or API Gateway(应用防火墙/API网关)
Stars: ✭ 547 (+1302.56%)
aws-firewall-factoryDeploy, update, and stage your WAFs while managing them centrally via FMS.
Stars: ✭ 72 (+84.62%)
Padrino FrameworkPadrino is a full-stack ruby framework built upon Sinatra.
Stars: ✭ 3,310 (+8387.18%)
encode-mePayload encoder for bypass WAF
Stars: ✭ 14 (-64.1%)
JxwafJXWAF(锦衣盾)是一款开源web应用防火墙
Stars: ✭ 768 (+1869.23%)
Fomalhaut🚀 A Simple API Gateway for Building Security and Flexible Microservices.
Stars: ✭ 272 (+597.44%)
Secbox🖤 网络安全与渗透测试工具导航
Stars: ✭ 222 (+469.23%)
AwsA collection of bash shell scripts for automating various tasks with Amazon Web Services using the AWS CLI and jq.
Stars: ✭ 493 (+1164.1%)
WafpassAnalysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF.
Stars: ✭ 184 (+371.79%)
broomA disk cleaning utility for developers.
Stars: ✭ 38 (-2.56%)
vulture-baseVulture 4 base system and bootstrap scripts
Stars: ✭ 33 (-15.38%)
Openrasp🔥Open source RASP solution
Stars: ✭ 2,036 (+5120.51%)
Cerberus一款功能强大的漏洞扫描器,子域名爆破使用aioDNS,asyncio异步快速扫描,覆盖目标全方位资产进行批量漏洞扫描,中间件信息收集,自动收集ip代理,探测Waf信息时自动使用来保护本机真实Ip,在本机Ip被Waf杀死后,自动切换代理Ip进行扫描,Waf信息收集(国内外100+款waf信息)包括安全狗,云锁,阿里云,云盾,腾讯云等,提供部分已知waf bypass 方案,中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等),支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能
Stars: ✭ 389 (+897.44%)
docker-wallarm-node⚡️ Docker official image for Wallarm Node. API security platform agent.
Stars: ✭ 18 (-53.85%)
OpenwafWeb security protection system based on openresty
Stars: ✭ 563 (+1343.59%)
waf4wordpressWAF for WordPress 🔥 with 60+ security checks and weekly updates
Stars: ✭ 102 (+161.54%)
Awesome Waf🔥 Everything about web-application firewalls (WAF).
Stars: ✭ 4,047 (+10276.92%)
PoW-ShieldProject dedicated to fight Layer 7 DDoS with proof of work, featuring an additional WAF. Completed with full set of features and containerized for rapid and lightweight deployment.
Stars: ✭ 99 (+153.85%)
JanusecJanusec Application Gateway, Provides Fast and Secure Application Delivery. JANUSEC应用网关,提供快速、安全的应用交付。
Stars: ✭ 771 (+1876.92%)
Htrace.shMy simple Swiss Army knife for http/https troubleshooting and profiling.
Stars: ✭ 3,465 (+8784.62%)
Laravel FirewallWeb Application Firewall (WAF) package for Laravel
Stars: ✭ 544 (+1294.87%)
coraza-caddyOWASP Coraza middleware for Caddy. It provides Web Application Firewall capabilities
Stars: ✭ 75 (+92.31%)
JugglerA system that may trick hackers. 一个也许能骗到黑客的系统。
Stars: ✭ 321 (+723.08%)
waf-brainMachine Learning WAF Based
Stars: ✭ 74 (+89.74%)
CloudbunnyCloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.
Stars: ✭ 273 (+600%)
waflabA web-based testing platform for WAF (Web Application Firewall)'s correctness
Stars: ✭ 25 (-35.9%)
BurpsuitehttpsmugglerA Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
Stars: ✭ 529 (+1256.41%)
Raptor wafRaptor - WAF - Web application firewall using DFA [ Current version ] - Beta
Stars: ✭ 246 (+530.77%)
nginx-lua-wafNginx-Lua-WAF是一款基于Nginx的使用Lua语言开发的灵活高效的Web应用层防火墙
Stars: ✭ 58 (+48.72%)
AutosqliAn automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.
Stars: ✭ 222 (+469.23%)
Build TeaWeb-可视化的Web代理服务。DEMO: http://teaos.cn:7777
Stars: ✭ 656 (+1582.05%)
SksSecurity Knowledge Structure(安全知识汇总)
Stars: ✭ 205 (+425.64%)
EdgeAdminCDN & WAF集群管理系统。
Stars: ✭ 199 (+410.26%)
Docker WafAn NGINX and ModSecurity based Web Application Firewall for Docker
Stars: ✭ 181 (+364.1%)
ModsecurityModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analys…
Stars: ✭ 5,015 (+12758.97%)
litewafLightweight In-App Web Application Firewall for PHP
Stars: ✭ 32 (-17.95%)
Haproxy WiWeb interface for managing Haproxy, Nginx and Keepalived servers
Stars: ✭ 823 (+2010.26%)
BlazyBlazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF .
Stars: ✭ 637 (+1533.33%)
Awesome Nginx Security🔥 A curated list of awesome links related to application security related to the environments with NGINX or Kubernetes Ingres Controller (based on NGINX)
Stars: ✭ 417 (+969.23%)
k8s-lempLEMP stack in a Kubernetes cluster
Stars: ✭ 74 (+89.74%)