ftw

WAF 测试框架 FTW 目的 本项目由来自 ModSecurity 和 Fastly 的研究人员创建，旨在为 WAF 规则提供严格的测试。它使用 OWASP 核心规则集 V3 作为基线来测试 WAF 上的规则。规则集中的每条规则都被加载到一个 YAML 文件中，该文件会发出可触发这些规则的 HTTP 请求。用户可以在测试发出后验证规则的执行情况，确保从攻击中收到预期的响应。 目标 / 用例包括： 通过使用持续集成并向 WAF 发出可重复的攻击来发现 WAF 部署中的回归问题 为 ModSecurity 中新规则的测试提供框架，如果提交了规则，则必须具有相应的正向和负向测试...

ModSec-log4j2

Probando la regla de ModSec Requisitos previos Tener docker instalado Tener Java instalado en tu máquina Ejecutando la prueba Realizar el git clone del repositorio Ejecutar el siguiente comando para levantar el WAF ModSec y la aplicación vulnerable root@kitploit: docker stack deploy -c...

wafparan01d3

Valutazione rapida del WAF "paranoid" Doctor WAFPARAN01D3 Lo strumento di test del livello di paranoia del Web Application Firewall. — Daalt3kx.github.io -blue.svg...

ftw

Framework per testare WAF FTW Scopo Questo progetto è stato creato da ricercatori di ModSecurity e Fastly per fornire test rigorosi per le regole WAF. Utilizza l'OWASP Core Ruleset V3 come baseline per testare le regole su un WAF. Ogni regola del ruleset viene caricata in un file YAML che emette...

cve-2021-44228-waf-tests

Semplice script bash per testare il tuo WAF o altri dispositivi contro le stringhe di attacco Log4Shell e vari bypass Trucchi di bypass da: https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words Per eseguire: root@kitploit: ./cve-2021-44228.sh -t -c Oppure per usare i valori predefinit...

waf-checker

Una potente applicazione web per testare quanto bene il tuo Web Application Firewall WAF protegge contro i vettori di attacco comuni. → waf-checker.com ← Caratteristiche Test di sicurezza 19+ categorie di attacco pronte all'uso: SQL Injection, XSS, Path Traversal, Command Injection, SSRF, NoSQL...

FTW - Framework For Testing WAFs

This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP requests that will trigger these rules...

Applicure dotDefender 4.01-3 - Persistent Cross-Site Scripting

An advisory by EnableSecurity. ID: ES-20100601 Advisory URL: http://resources.enablesecurity.com/advisories/ES-20100601-dotdefender4.txt Affected Versions: version 4.0 Fixed versions: 4.01-3 and later Description: Applicure dotDefender is a Web Application Firewall that can be installed on Window...

Applicure dotDefender 4.0 administrative interface cross site scripting

Applicure dotDefender 4.0 administrative interface cross site scripting An advisory by EnableSecurity. ID: ES-20100601 Advisory URL: http://resources.enablesecurity.com/advisories/ES-20100601-dotdefender4.txt Affected Versions: version 4.0 Fixed versions: 4.01-3 and later Description: Applicure...