Alternatives and similar repositories for WAF-rules:

Users that are interested in WAF-rules are comparing it to the libraries listed below

• ASTTeam / DAST
  《深入理解DAST动态应用程序安全测试》Dynamic Application Security Testing.
  ☆49Updated 2 years ago
• qiyeboy / kill_webshell_detect
  总结了免杀webshell的方法论
  ☆48Updated 4 years ago
• Ramos-dev / R9000
  ☆58Updated 4 years ago
• h2-stack / LL-RASP
  Low-level RASP: Protecting Applications Implemented in High-level Programming Languages
  ☆57Updated last year
• AntSwordProject / ant_php_extension
  PHP 扩展, 用于 PHP-FPM、FastCGI、LD_PRELOAD等模式下突破 disabled_functions
  ☆104Updated 3 years ago
• boundaryx / cloudrasp-log4j2
  一个针对防御 log4j2 CVE-2021-44228 漏洞的 RASP 工具。 A Runtime Application Self-Protection module specifically designed for log4j2 RCE (CVE-2021-442…
  ☆123Updated 3 years ago
• iiiusky / java_rasp_example
  ☆28Updated 4 years ago
• bit4woo / Java_deserialize_vuln_lab
  Java 反序列化学习的实验代码 Java_deserialize_vuln_lab
  ☆87Updated 6 years ago
• brant-ruan / slides-and-papers
  slides and papers from (or partly from) Bonan
  ☆22Updated 11 months ago
• angelwhu / jvm-rasp
  基于JVM-Sandbox实现RASP安全监控防护
  ☆52Updated last year
• Y4er / javaagent-tomcat-memshell
  使用java agent反序列化注入内存shell
  ☆67Updated 4 years ago
• jweny / check_jsonp_based_on_ast
  基于AST的JSONP劫持漏洞自动化挖掘
  ☆93Updated 4 years ago
• G4rb3n / Malbox
  恶意软件容器靶机
  ☆101Updated 3 years ago
• threedr3am / GuanYu
  JVM runtime class loading protection agent.（JVM类加载保护agent）
  ☆48Updated 3 years ago
• lyxhh / midvulhub
  ☆31Updated 4 years ago
• HXSecurity / DongTai-engine
  This repository has been merged into https://github.com/HXSecurity/DongTai. DongTai-engine used to analyze the method data collected by …
  ☆20Updated 2 years ago
• theSecHunter / Hades
  Hades is an cross-platform HIDS with kernel-space data collection.
  ☆44Updated last year
• 0linlin0 / CyberBox
  Java Exp FrameWork
  ☆104Updated 3 years ago
• MagicZer0 / Jackson_RCE-CVE-2019-12384
  CVE-2019-12384 漏洞测试环境
  ☆20Updated 2 years ago
• cor0ps / codeql
  收集规则
  ☆30Updated 2 years ago
• grayddq / PypiScan
  这个脚本主要提供对pypi供应链的源头进行安全扫描研究，扫描并发现未知的恶意包情况。
  ☆31Updated last year
• shellsec / Knowledge-Base
  Knowledge Base 慢雾安全团队知识库
  ☆29Updated 5 years ago
• kingkaki / Struts2-Vulenv
  struts2 漏洞环境源代码
  ☆75Updated 2 years ago
• kevien / javacode
  some java code i met or i used
  ☆29Updated 5 years ago
• Afant1 / RemoteObjectInvocationHandler
  bypass JEP290 RaspHook code
  ☆62Updated 4 years ago
• Lonely-night / fastjson_gadgets_scanner
  ☆131Updated 2 years ago
• TomAPU / bpfcronescape
  ☆81Updated 3 years ago
• proudwind / struts2_vulns
  Struts2 vuln env
  ☆43Updated 2 years ago
• boy-hack / bugbounty-cheatsheet
  A list of interesting payloads, tips and tricks for bug bounty hunters.
  ☆24Updated 5 years ago
• r0eXpeR / Security_RSS
  我的一些安全订阅
  ☆53Updated 4 years ago