#waf (30 Repositories)
Ranked open-source repositories tagged with #waf, scored by pull request acceptance likelihood and maintainer engagement velocity.
33.9%
140.6h
30 repositories tagged #waf
fabriziosalmi/caddy-waf
Caddy WAF (Regex Rules, IP and DNS filtering, Rate Limiting, GeoIP, Tor, Anomaly Detection)
FWGS/xash3d-fwgs
Xash3D FWGS engine
fuomag9/caddy-proxy-manager
The modern web interface for Caddy Server. WAF protection, automatic HTTPS, mTLS, forward auth, geo blocking, L4 TCP/UDP proxying, traffic analytics, a full REST API, and a complete audit trail. All in one place.
coreruleset/coreruleset
OWASP CRS (Official Repository)
crowdsecurity/crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
corazawaf/coraza
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
coreruleset/go-ftw
Web Application Firewall Testing Framework - Go version
chaitin/SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
jbe2277/waf
Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
owasp-modsecurity/ModSecurity
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
owasp-modsecurity/ModSecurity-nginx
ModSecurity v3 Nginx Connector
corazawaf/coraza-spoa
A wrapper for integrating the OWASP Coraza WAF with HAProxy's SPOE filters.
corazawaf/coraza-proxy-wasm
proxy-wasm filter based on Coraza WAF
apache/casbin-gateway
See what every AI coding agent on your machine is doing, and whether the API behind it is the one you paid for. Claude Code, Codex, Cursor, Gemini CLI and more: one endpoint for 44 model vendors, A–F API authenticity grading, per-agent permissions, usage and prompt records.
Safe3/uusec-waf
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
wallarm/gotestwaf
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
theonemule/docker-waf
An NGINX and ModSecurity based Web Application Firewall for Docker
baidu/openrasp
🔥Open source RASP solution
jx-sec/jxwaf
JXWAF是一款基于AI大模型的Web应用防火墙
romainmarcoux/malicious-ip
Aggregation of lists of malicious IP addresses, to be blocked in the WAN > LAN direction, integrated into firewalls: FortiGate, Palo Alto, pfSense, IPtables ...
C4o/Juggler
A system that may trick hackers. 针对黑客的拟态欺骗系统。
CHYbeta/Code-Audit-Challenges
Code-Audit-Challenges
YagamiiLight/Cerberus
一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能
leohearts/awd-watchbird
A powerful PHP WAF for AWD
ingres-si/ingressi
Self-hosted reverse proxy built on Caddy: proxy hosts, automatic HTTPS, TCP/UDP streams and traffic analytics, with an optional per-host WAF, sign-in and access rules.
p0pr0ck5/lua-resty-waf
High-performance WAF built on the OpenResty stack
Ekultek/WhatWaf
Detect and bypass web application firewalls and protection systems
corazawaf/libinjection-go
libinjection is a Golang port of the libinjection(https://github.com/client9/libinjection)
al0ne/Vxscan
python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。
titansec/OpenWAF
Web security protection system based on openresty