Alternatives and similar repositories for WAF-rules

Users that are interested in WAF-rules are comparing it to the libraries listed below

• qiyeboy / kill_webshell_detect
  总结了免杀webshell的方法论
  ☆48Updated 4 years ago
• iiiusky / java_rasp_example
  ☆28Updated 4 years ago
• grayddq / PypiScan
  这个脚本主要提供对pypi供应链的源头进行安全扫描研究，扫描并发现未知的恶意包情况。
  ☆29Updated 2 years ago
• 404notf0und / AI-for-Security-Landing
  企业级安全智能化实践
  ☆69Updated 3 years ago
• angelwhu / jvm-rasp
  基于JVM-Sandbox实现RASP安全监控防护
  ☆52Updated last year
• ZhuriLab / Exploits
  CVE exploits for Web, Windows, Linux and others are independently written by Zhuri Lab
  ☆48Updated 4 years ago
• G4rb3n / Script-Ganker
  恶意脚本检测分类工具
  ☆40Updated 4 years ago
• pyn3rd / my-presentation-slide
  ☆101Updated last year
• AntSwordProject / ant_php_extension
  PHP 扩展, 用于 PHP-FPM、FastCGI、LD_PRELOAD等模式下突破 disabled_functions
  ☆104Updated 3 years ago
• zhutougg / Awesome-Intranet_pentest_tool
  ☆80Updated 4 years ago
• Ramos-dev / graph4code
  超硬核！使用图数据技术发现软件漏洞
  ☆184Updated 3 years ago
• LeadroyaL / java_xxe_2019
  总结了一下2019年在JVM环境中使用XXE攻击的知识
  ☆57Updated 5 years ago
• shellsec / Knowledge-Base
  Knowledge Base 慢雾安全团队知识库
  ☆29Updated 5 years ago
• m4yfly / vscode-maudit
  Simple source code security audit helper
  ☆50Updated 11 months ago
• hooog / webshellDc
  ☆20Updated 4 years ago
• bit4woo / Java_deserialize_vuln_lab
  Java 反序列化学习的实验代码 Java_deserialize_vuln_lab
  ☆87Updated 6 years ago
• SecurityCN / Vulnerability-analysis
  ☆62Updated 5 years ago
• Ramos-dev / R9000
  ☆58Updated 5 years ago
• lcatro / Think-in-Security
  从二进制到WEB ,分享我在安全路上的思考与点滴,后面会不断地更新..
  ☆83Updated 7 years ago
• shadow-horse / CVE-2019-17571
  Apache Log4j 1.2.X存在反序列化远程代码执行漏洞
  ☆78Updated 5 years ago
• crifan / industrial_control_security_overview
  工控安全概览
  ☆83Updated 2 years ago
• QiAnXinCodeSafe / Legendsec
  奇安信报开源软件漏洞cve所用目录。每个人报漏洞请建立自己的目录。
  ☆45Updated 5 years ago
• Monyer / xssee
  A js encode/decode simple tool for XSS
  ☆27Updated 5 years ago
• Kanatoko / libinjection-Java
  libinjection-Java is a Java porting of the libinjection(http://www.client9.com/projects/libinjection/)
  ☆20Updated 3 years ago
• 404notf0und / FXY
  Security-Scenes-Feature-Engineering-Toolkit, Continuous Integration.一款安全数据特征化工具
  ☆59Updated 2 years ago
• nnewkin / Poc_Pentest
  ☆1Updated 3 years ago
• 404notf0und / CVE-Flow
  CVE Data Analysis, CVE Monitor, CVE EXP Prediction Based on Deep Learning. 1999-2020年存量CVE数据分析、监控CVE增量更新、基于深度学习的CVE EXP预测和自动化推送
  ☆174Updated 2 years ago
• peter-cui1221 / sqlinjection-detect
  SQL injection detection engine built on of SQL tokenizing and syntax analysis written in C
  ☆61Updated 4 years ago
• h2-stack / LL-RASP
  Low-level RASP: Protecting Applications Implemented in High-level Programming Languages
  ☆63Updated last year
• boy-hack / bugbounty-cheatsheet
  A list of interesting payloads, tips and tricks for bug bounty hunters.
  ☆24Updated 5 years ago