web-application-firewall

🔥 Everything about web-application firewalls (WAF).

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

Detect and bypass web application firewalls and protection systems

Janusec Application Gateway, Provides Fast and Secure Application Delivery (Authentication, WAF/CC, HTTPS and ACME automatic certificates). JANUSEC应用网关，提供快速、安全的应用交付（身份认证, WAF/CC, HTTPS以及ACME自动证书）。

Handy, High performance Nginx firewall module & 方便且高性能的 Nginx 防火墙模块

Web security protection system based on openresty

The Linux Application Delivery Controller

A powerful PHP WAF for AWD

Analysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF.

Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.

A guided mutation-based fuzzer for ML-based Web Application Firewalls

A tool to perform DNS reconnaissance on target networks. Among the DNS information got from include subdomains, mx records, web application firewall detection and more fingerprinting and lookups

xWAF 3.0 - Free Web Application Firewall, Open-Source.

The Unified Web Administration Portal for Janusec Application Gateway (an application security solution which provides Web Application Firewall, unified web administration portal, private key protection, web routing and scalable load balancing).

WebCOP Firewall is advanced and PHP based web application firewall. Doesnt ask for root privileges.

Reinforced Mitigation Security Filter

Simple machine learning based web application firewall (WAF) created in python

Nemesida WAF Free

Designed and Implemented a Web Application Firewall as an Apache module that "sits" in-front of a web server. The WAF is designed to stop malicious requests from known attacks such as SQL Injection, XSS attacks and from unknown attacks by learning the legitimate traffic.

⚡️ Docker official image for Wallarm Node. API security platform agent.

Signal Sciences Site Manager

F5 Agility Labs for Web Application Firewall Use Cases

💂‍♂️ PHP Web Application Firewall

A simple Web Application Firewall docker image.

Official NGINX compiled with NBS System NAXSI

SimpleWAF is a simple web application firewall writen using PHP that can send real time attacking report by some actor using Telegram Bot API.

Avoid malicious payloads with machine learning!

ELRO-Security is an advance & free WAF (Web Application Firewall), It is using to defend servers and especially websites around the internet. It is very easy to install and allow websites owner to add their own website via a web application interface which makes it accessible for almost everyone regardless of the level of codding.

OCS-WAF: a Web Application Firewall based on anomaly detection using One-Class SVM classifier

Convert CIDR ranges into the ranges allowed by AWS WAF IP Sets