waf-checker

WAF Checker This project helps you check how well your Web Application Firewall WAF protects your product against common web attacks. It can be run as a Cloudflare Worker with a built-in interactive Web UI or as a standalone Node.js CLI tool. 🧪 Test Coverage & Status All packages are thoroughly...

WAFEC

OWASP WAFEC Project Document Repository OWASP WAF Evaluation Criteria Project The Web Application Firewall Evaluation Criteria WAFEC provides interested partied, including users, vendors and 3rd party evaluators with a tool to learn about Web Application Firewalls WAFs and evaluate the suitabilit...

CVE-2025-64446-FortiWeb-CGI-Bypass-PoC

CVE-2025-64446 Exploit Tool Exploit tool for CVE-2025-64446 vulnerability verification and exploitation in FortiWeb devices. Description This tool tests for and exploits a path traversal vulnerability CVE-2025-64446 in FortiWeb web application firewalls. It can be used to verify vulnerability...

bunkerweb

🌐 Website | 🤝 Panel | 📓 Documentation | 👨‍💻 Demo | 📱 Demo UI | 🧩 Templates | 🛡️ Examples 💬 Chat | 📝 Forum | 📝 Community | 🗺️ Threatmap | 📊 Status | 🔎 Feedback 🛡️ Make security by default great again! BunkerWeb Bun...

f5-waf-quick-patch-cve-2021-44228

f5-waf-quick-patch-CVE-2021-44228 F5 Networks Advanced WAF/ASM Quick Patch CVE 2021-44228. Overview This tool connects to a BIG-IP device and creates a custom signature set called CVE-2021-4428 and apply it to all policies in blocking mode. It also enforces all signatures and apply the changes...

Awesome-WAF

Awesome WAF Everything about web application firewalls WAFs from a security perspective. 🔥 Foreword: This was originally my own collection on WAFs. I am open-sourcing it in the hope that it will be useful for pentesters and researchers out there.As the saying goes, "the community just learns from...

lua-resty-waf

Name lua-resty-waf - High-performance WAF built on the OpenResty stack Table of Contents Name Status Description Requirements Performance Installation Synopsis Public Functions lua-resty-waf.loadsecrules lua-resty-waf.init Public Methods lua-resty-waf:new lua-resty-waf:setoption...

ModSecurity

Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. In general, it provides the capability to load/interpret rules written in the ModSecurity...

opensnitch

Join the project community on our server! OpenSnitch is a GNU/Linux application firewall. •• Key Features • Download • Installation • Usage examples • In the press •• Key features Interactive outbound connections filtering. Block ads, trackers or malware domains system wide. Ability to configure...

SafeLine

SafeLine - Make your web apps secure 🏠 Website | 📖 Docs | 🔍 Live Demo | 🙋‍♂️ Discord | 中文版 👋 INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...

coraza

Coraza - Web Application Firewall Coraza is an open source, enterprise-grade, high performance Web Application Firewall WAF ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set v4. Website:...

CVE-2025-55182-bypass

CVE-2025-55182-bypass CVE-2025-55182-bypass-waf...

wafw00f

WAFW00F The Web Application Firewall Fingerprinting Tool. — FromEnable Security -blue.svg How does it work? To do its magic, WAFW00F does the following: Sends a normal HTTP request and analyses the response; this identifies a number of WAF solutions. If that is not successful, it sends a number o...

wafaray

Enhance your malware detection with WAF + YARA WAFARAY WAFARAY is a LAB deployment based on Debian 11.3.0 stable x64 made and cooked between two main ingredients WAF + YARA to detect malicious files e.g. webshells, virus, malware, binaries typically through web functions upload files. -blue.svg...

NGWAF

N3XT-G3N Web App Firewall NGWAF NGWAF is created by@yupengfei, @zhangbosen, @matthewng and @elizabethlim. Special shoutout to@ruinahkoh for her contributions to the initial stages of NGWAF. NGWAF is an experimental proof of concept and not ready for production use in its current form. Contents 1...

opensnitch

¡Únete a la comunidad del proyecto en nuestro servidor! OpenSnitch es un cortafuegos firewall de aplicaciones para GNU/Linux. •• Características principales • Descarga • Instalación • Ejemplos de uso • En la prensa •• Características principales Filtrado interactivo de conexiones salientes...

coraza

Coraza - Cortafuegos de Aplicaciones Web Coraza es un cortafuegos de aplicaciones web WAF de código abierto, de grado empresarial y alto rendimiento, listo para proteger tus queridas aplicaciones. Está escrito en Go, es compatible con los conjuntos de reglas SecLang de ModSecurity y es 100%...

crowdsec

CrowdSec es una solución de seguridad de código abierto y participativa que ofrece detección y protección contra IPs maliciosas mediante crowdsourcing. Detecta y bloquea con nuestro Motor de Seguridad, contribuye a la red y disfruta de nuestra lista de bloqueo comunitaria en tiempo real...

web-application-firewall-

Web Application Firewall Simulation Overview This project demonstrates a Web Application Firewall WAF simulation using Flask and a vulnerability checker for CVE-2017-5638. The WAF middleware blocks HTTP requests containing specific patterns, and the vulnerability checker tests for and exploits th...

CVE-2022-4539

Usage Considerations: Adaptability: You can easily modify the payloads, IP generation logic, and proxies to match different scenarios or environments. Ethical Use: Ensure you have explicit permission before testing any system with this code. Scalability: This code is designed to be scalable and...