Alternatives and similar repositories for WAF-rules

Users that are interested in WAF-rules are comparing it to the libraries listed below

• h2-stack / LL-RASP
  Low-level RASP: Protecting Applications Implemented in High-level Programming Languages
  ☆59Updated last year
• qiyeboy / kill_webshell_detect
  总结了免杀webshell的方法论
  ☆48Updated 4 years ago
• boundaryx / cloudrasp-log4j2
  一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-442…
  ☆123Updated 3 years ago
• Ramos-dev / R9000
  ☆58Updated 5 years ago
• ASTTeam / DAST
  《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.
  ☆51Updated 2 years ago
• kingkaki / Struts2-Vulenv
  struts2 漏洞环境源代码
  ☆75Updated 2 years ago
• shellsec / Knowledge-Base
  Knowledge Base 慢雾安全团队知识库
  ☆29Updated 5 years ago
• brant-ruan / slides-and-papers
  slides and papers from (or partly from) Bonan
  ☆22Updated last year
• iiiusky / java_rasp_example
  ☆28Updated 4 years ago
• pyn3rd / my-presentation-slide
  ☆101Updated last year
• threedr3am / GuanYu
  JVM runtime class loading protection agent.（JVM类加载保护agent）
  ☆48Updated 4 years ago
• cor0ps / codeql
  收集规则
  ☆30Updated 2 years ago
• martinzhou2015 / writeups
  ☆10Updated 4 years ago
• lijiejie / log4j2_vul_local_scanner
  Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-20…
  ☆85Updated 3 years ago
• angelwhu / jvm-rasp
  基于JVM-Sandbox实现RASP安全监控防护
  ☆52Updated last year
• boy-hack / bugbounty-cheatsheet
  A list of interesting payloads, tips and tricks for bug bounty hunters.
  ☆24Updated 5 years ago
• lalajun / RMIDeserialize
  RMI 反序列化环境 一步步
  ☆210Updated 4 years ago
• Cherishao / Analysis-Tools
  恶意软件分析套件
  ☆18Updated 7 years ago
• AntSwordProject / ant_php_extension
  PHP 扩展, 用于 PHP-FPM、FastCGI、LD_PRELOAD等模式下突破 disabled_functions
  ☆104Updated 3 years ago
• 1135 / Kong_exploit
  ☆41Updated 5 years ago
• Leeyuxun / CNN-WebShell-Detect-Tool
  基于卷积神经网络的WebShell检测工具，可以检测JSP和PHP类型文件，以opcode和bytecode作为检测特征，基于Django框架
  ☆17Updated 3 years ago
• salmonx / dictionaries
  Fuzzing dictionaries for afl-fuzz/LibFuzzer
  ☆90Updated 3 years ago
• 0linlin0 / CyberBox
  Java Exp FrameWork
  ☆104Updated 4 years ago
• G4rb3n / Malbox
  恶意软件容器靶机
  ☆102Updated 4 years ago
• wonderkun / crawler
  利用github action定时爬取先知、安全客等的文章进行保存
  ☆59Updated 3 years ago
• Lonely-night / fastjson_gadgets_scanner
  ☆131Updated 2 years ago
• QAX-A-Team / redis_lua_exploit
  ☆143Updated 6 years ago
• LeadroyaL / java_xxe_2019
  总结了一下2019年在JVM环境中使用XXE攻击的知识
  ☆57Updated 5 years ago
• guimaizi / testing_wave
  ☆58Updated 5 years ago
• bit4woo / Java_deserialize_vuln_lab
  Java 反序列化学习的实验代码 Java_deserialize_vuln_lab
  ☆87Updated 6 years ago