coreruleset / ftw
Framework for Testing WAFs (FTW!)
☆129Updated 11 months ago
Alternatives and similar repositories for ftw:
Users that are interested in ftw are comparing it to the libraries listed below
- Framework for Testing WAFs (FTW!)☆266Updated last year
- WAFBench (wb) is a tool to measure the performance of WAF(Web Application Firewall) . It's based on latest code of ab (ApacheBench), and …☆108Updated 2 years ago
- Make TLS/SSL security mass scans with testssl.sh and import results into ElasticSearch☆109Updated 6 years ago
- multitenant ModSecurity compatible WAF engine from Edgio☆89Updated 4 months ago
- Logstash configuration filter set framework to parse modsecurity audit logs☆112Updated 4 years ago
- Chef Cookbook which provisions apache+mod_security+owasp-crs☆37Updated 6 years ago
- Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website☆138Updated 4 years ago
- Passive DNS collection using Zeek☆182Updated last year
- Elasticsearch for Offensive Security☆140Updated 4 years ago
- Vulnerability Data in ES☆145Updated 7 years ago
- A command line security audit tool for Amazon Web Services☆81Updated 6 years ago
- Python Bindings for ModSecurity v3☆86Updated last year
- Measures the effectiveness of your Web Application Firewall (WAF)☆78Updated last year
- 'Continuous' AWS perimeter monitoring: Periodically scan internet facing AWS resources to detect misconfigured services.☆64Updated 5 years ago
- Signature-free approach library to detect injection and commanding attacks☆87Updated 3 years ago
- General Open Architecture Security Questionnaire☆32Updated last year
- passivedns-client provides a library and a query tool for querying several passive DNS providers☆199Updated 3 years ago
- WAF Research☆180Updated 2 years ago
- The official ModSecurity Docker images☆134Updated 2 years ago
- for AWS Security material☆247Updated 3 years ago
- Terraform module which provides easy to configure AWS environment for running automated security scanning solutions at scheduled interval…☆46Updated 6 years ago
- A tool for identifying misconfigured CloudFront domains☆351Updated 4 years ago
- Container Security Verification Standard☆58Updated 5 years ago
- A repository for OSSEC rules and decoders☆54Updated last year
- Project intended to make Attack Maps part of software development by reducing the time it takes to complete them.☆48Updated 8 years ago
- Lightspin AWS IAM Vulnerability Scanner☆96Updated 4 years ago
- All-in-one tool for managing vulnerability reports from AppSec pipelines☆106Updated 2 years ago
- Identify IP addresses owned by public cloud providers☆120Updated 9 months ago
- Route53/CloudFront Vulnerability Assessment Utility☆85Updated last year
- Finding exposed secrets and personal data in GitLab☆197Updated 5 months ago