Awesome Open Source
Awesome Open Source
Combined Topics
waf
x
Advertising
📦 9
All Projects
Application Programming Interfaces
📦 120
Applications
📦 181
Artificial Intelligence
📦 72
Blockchain
📦 70
Build Tools
📦 111
Cloud Computing
📦 79
Code Quality
📦 28
Collaboration
📦 30
Command Line Interface
📦 48
Community
📦 81
Companies
📦 60
Compilers
📦 60
Computer Science
📦 74
Configuration Management
📦 39
Content Management
📦 167
Control Flow
📦 197
Data Formats
📦 77
Data Processing
📦 266
Data Storage
📦 132
Economics
📦 60
Frameworks
📦 198
Games
📦 122
Graphics
📦 103
Hardware
📦 148
Integrated Development Environments
📦 47
Learning Resources
📦 147
Legal
📦 28
Libraries
📦 119
Lists Of Projects
📦 21
Machine Learning
📦 336
Mapping
📦 61
Marketing
📦 15
Mathematics
📦 55
Media
📦 228
Messaging
📦 97
Networking
📦 304
Operating Systems
📦 84
Operations
📦 120
Package Managers
📦 52
Programming Languages
📦 229
Runtime Environments
📦 96
Science
📦 42
Security
📦 375
Social Media
📦 26
Software Architecture
📦 70
Software Development
📦 68
Software Performance
📦 57
Software Quality
📦 127
Text Editors
📦 45
Text Processing
📦 131
User Interface
📦 310
User Interface Components
📦 465
Version Control
📦 29
Virtualization
📦 68
Web Browsers
📦 38
Web Servers
📦 25
Web User Interface
📦 194
The Top 207 Waf Open Source Projects on Github
Categories
>
Security
>
Waf
Modsecurity
⭐
4,808
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.
Naxsi
⭐
3,842
NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
Awesome Waf
⭐
3,735
🔥 Everything about web-application firewalls (WAF).
Htrace.sh
⭐
3,338
My simple Swiss Army knife for http/https troubleshooting and profiling.
Padrino Framework
⭐
3,301
Padrino is a full-stack ruby framework built upon Sinatra.
Wafw00f
⭐
2,810
WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
Openrasp
⭐
1,927
🔥Open source RASP solution
Whatwaf
⭐
1,737
Detect and bypass web application firewalls and protection systems
Collection Document
⭐
1,416
Collection of quality safety articles. Awesome articles.
Burpsuite Collections
⭐
1,353
有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file
Vxscan
⭐
1,280
python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。
Lua Resty Waf
⭐
1,024
High-performance WAF built on the OpenResty stack
Roxy Wi
⭐
924
Web interface for managing Haproxy, Nginx and Keepalived servers
Modsecurity Nginx
⭐
844
ModSecurity v3 Nginx Connector
Janusec
⭐
829
Janusec Application Gateway, Provides Fast and Secure Application Delivery (Authentication, WAF/CC, HTTPS and ACME automatic certificates). JANUSEC应用网关，提供快速、安全的应用交付（身份认证, WAF/CC, HTTPS以及ACME自动证书）。
Jxwaf
⭐
814
JXWAF(锦衣盾)是一款开源web应用防火墙
Code Audit Challenges
⭐
790
Code-Audit-Challenges
Blazy
⭐
657
Blazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF .
Build
⭐
624
TeaWeb-可视化的Web代理服务。DEMO: http://teaos.cn:7777
Openwaf
⭐
579
Web security protection system based on openresty
Waf
⭐
577
Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
Laravel Firewall
⭐
572
Web Application Firewall (WAF) package for Laravel
Waf
⭐
541
🚦Web Application Firewall or API Gateway(应用防火墙/API网关)
Burpsuitehttpsmuggler
⭐
539
A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
Xash3d Fwgs
⭐
432
Xash3D FWGS engine. Rebooted fork since big Xash3D 0.99(1.0 is not yet) update.
Awesome Nginx Security
⭐
373
🔥 A curated list of awesome links related to application security related to the environments with NGINX or Kubernetes Ingres Controller (based on NGINX)
Aws
⭐
362
A collection of bash shell scripts for automating various tasks with Amazon Web Services using the AWS CLI and jq.
Gotestwaf
⭐
356
An open-source project in Golang to test different web application firewalls (WAF) for detection logic and bypasses
Secbox
⭐
355
🖤 网络安全与渗透测试工具导航
Identywaf
⭐
312
Blind WAF identification tool
Cloudbunny
⭐
279
CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.
Curiefense
⭐
275
Curiefense is a unified, open source platform protecting cloud native applications.
Fomalhaut
⭐
254
🚀 A Simple API Gateway for Building Security and Flexible Microservices.
Raptor_waf
⭐
246
Raptor - WAF - Web application firewall using DFA [ Current version ] - Beta
Awd Watchbird
⭐
246
A powerful PHP WAF for AWD
Cerberus
⭐
246
一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能
Autosqli
⭐
229
An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.
Coraza Waf
⭐
217
Coraza WAF is a golang modsecurity compatible web application firewall library
Securetea Project
⭐
214
The OWASP SecureTea Project provides a one-stop security solution for various devices (personal computers / servers / IoT devices)
Wafpass
⭐
174
Analysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF.
Juggler
⭐
173
A system that may trick hackers. 一个也许能骗到黑客的系统。
Sks
⭐
170
Security Knowledge Structure(安全知识汇总)
Docker Waf
⭐
159
An NGINX and ModSecurity based Web Application Firewall for Docker
Go Agent
⭐
134
Sqreen's Application Security Management for the Go language
Api Firewall
⭐
113
Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.
Awesome Cloud Security
⭐
111
Curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.
Code
⭐
107
TeaWeb Golang源码
Dotnetpad
⭐
103
The Waf DotNetPad is a simple and fast code editor that makes fun to program with C# or Visual Basic.
Edgeadmin
⭐
95
CDN & WAF集群管理。
Logstash Modsecurity
⭐
93
Logstash configuration filter set framework to parse modsecurity audit logs
Ftw
⭐
93
Framework for Testing WAFs (FTW!)
Waf4wordpress
⭐
88
WAF for WordPress 🔥 with 60+ security checks and weekly updates
Hooman
⭐
87
http interceptor to hoomanize cloudflare requests
Cidram
⭐
86
CIDRAM: Classless Inter-Domain Routing Access Manager.
Pwn Sandbox
⭐
82
A sandbox to protect your pwn challenges being pwned in CTF AWD.
Modsecurity Apache
⭐
73
ModSecurity v3 Apache Connector
Go Wafw00f
⭐
70
使用golang重写开源工具wafw00f
Aws Cloudfront Extensions
⭐
68
The CloudFront Extensions is a solution package as handy extension for using Amazon CloudFront.
K8s Lemp
⭐
67
LEMP stack in a Kubernetes cluster
Terraform Aws Waf Webaclv2
⭐
62
Terraform module to configure WAF V2 Web ACL with managed rules for Application Load Balancer
Wafbypasser
⭐
58
Terraform Aws Waf Owasp Top 10 Rules
⭐
56
A Terraform module to create AWF WAF Rules for OWASP Top 10 security risks protection.
Waflz
⭐
56
multitenant ModSecurity compatible WAF engine from Edgecast
Ironclad
⭐
49
Web Application Firewall (WAF) on Kubernetes
Swooleyaf
⭐
47
PHP High Performance Micro Service Framework,高性能分布式微服务框架
Octopuswaf
⭐
45
OctopusWAF is a Web application firewall with high performance, made in C language and use libevent.
Waf Bypass
⭐
45
WAF Bypass Tool by Nemesida WAF Team
Luawaf
⭐
44
A secure and privately deployable web application firewall(WAF).一个安全、可私有部署的Web应用防火墙(WAF)。
Botwall4j
⭐
40
A botwall for Java web applications
Wafid
⭐
39
Wafid identify and fingerprint Web Application Firewall (WAF) products.
Xwaf
⭐
35
xWAF 3.0 - Free Web Application Firewall, Open-Source.
Broom
⭐
35
A disk cleaning utility for developers.
Nxtool Ng
⭐
34
Because life is too short to waste your time transforming naxsi logs to rules by hand
Releases Openstar Enterprise
⭐
33
releases-openstar-Enterprise
Pow Shield
⭐
31
Project dedicated to fight DDoS and spam with proof of work, featuring an additional WAF. Docker images available for rapid and lightweight deployment.
Waf Brain
⭐
30
Machine Learning WAF Based
Openresty Project V0.01
⭐
30
🌹 基于OpenResty编写一个MVC模式的WEB项目 V0.01
Vulture Base
⭐
30
Vulture 4 base system and bootstrap scripts
Php Aio Security
⭐
28
The objective of this class is offer an automatic system of protection for developers's projects and simplify some security operations as the check of CSRF or XSS all in a simple class. Infact you could just call the main method to have better security yet without too much complicated operations.
Geoportal Server Harvester
⭐
27
Next generation harvester for Geoportal Server.
Terraform Provider Incapsula
⭐
25
This package is a plugin for Terraform, and is designed to be used to auto-provision sites in Incapsula via Incapsula’s API from the terraform cli/yaml configurations.
Machine Learning Web Application Firewall And Dataset
⭐
25
Litewaf
⭐
24
Lightweight In-App Web Application Firewall for PHP
Janusec Admin
⭐
21
The Unified Web Administration Portal for Janusec Application Gateway (an application security solution which provides Web Application Firewall, unified web administration portal, private key protection, web routing and scalable load balancing).
Webcop Firewall
⭐
19
WebCOP Firewall is advanced and PHP based web application firewall. Doesnt ask for root privileges.
Firewalker
⭐
19
Testing framework for Cloudflare Firewall rules
Nginx Lua Waf
⭐
19
Nginx-Lua-WAF是一款基于Nginx的使用Lua语言开发的灵活高效的Web应用层防火墙
Wafalyzer
⭐
19
Web Application Firewall (WAF) Detector
Ingress
⭐
17
Wallarm WAF for Kubernetes Ingress Controller
Azure Aks Applicationgateway Waf
⭐
16
Waflab
⭐
15
A web-based testing platform for WAF (Web Application Firewall)'s correctness
Encode Me
⭐
15
Payload encoder for bypass WAF
Shieldfy Php Client
⭐
15
The official PHP SDK for Shieldfy
Ngx_waf_cc
⭐
14
nginx的cc防火墙，基于lua-nginx-module(openresty) , 根据loveshell/ngx_lua_waf，只留下cc防护功能
Maiev Waf
⭐
13
众安开源waf引擎
Waf Automation
⭐
13
DevOps with Barracuda Web Application Firewall
Mod_defender
⭐
13
Naxsi for Apache2
Docker Wallarm Node
⭐
13
⚡️ Docker official image for Wallarm Node. API security platform agent.
Cloudflare Detect
⭐
13
Detect whether a site is running behind Cloudflare.
Waf_bypass_guide
⭐
12
Guide For WAF Bypass Techniques
1-100 of 207 projects
Next >
Advertising
📦 9
All Projects
Application Programming Interfaces
📦 120
Applications
📦 181
Artificial Intelligence
📦 72
Blockchain
📦 70
Build Tools
📦 111
Cloud Computing
📦 79
Code Quality
📦 28
Collaboration
📦 30
Command Line Interface
📦 48
Community
📦 81
Companies
📦 60
Compilers
📦 60
Computer Science
📦 74
Configuration Management
📦 39
Content Management
📦 167
Control Flow
📦 197
Data Formats
📦 77
Data Processing
📦 266
Data Storage
📦 132
Economics
📦 60
Frameworks
📦 198
Games
📦 122
Graphics
📦 103
Hardware
📦 148
Integrated Development Environments
📦 47
Learning Resources
📦 147
Legal
📦 28
Libraries
📦 119
Lists Of Projects
📦 21
Machine Learning
📦 336
Mapping
📦 61
Marketing
📦 15
Mathematics
📦 55
Media
📦 228
Messaging
📦 97
Networking
📦 304
Operating Systems
📦 84
Operations
📦 120
Package Managers
📦 52
Programming Languages
📦 229
Runtime Environments
📦 96
Science
📦 42
Security
📦 375
Social Media
📦 26
Software Architecture
📦 70
Software Development
📦 68
Software Performance
📦 57
Software Quality
📦 127
Text Editors
📦 45
Text Processing
📦 131
User Interface
📦 310
User Interface Components
📦 465
Version Control
📦 29
Virtualization
📦 68
Web Browsers
📦 38
Web Servers
📦 25
Web User Interface
📦 194
"GitHub" is a registered trademark of GitHub, Inc. Awesome Open Source is not affiliated with GitHub.
