coreruleset / ftw
Framework for Testing WAFs (FTW!)
☆127Updated 9 months ago
Alternatives and similar repositories for ftw:
Users that are interested in ftw are comparing it to the libraries listed below
- Framework for Testing WAFs (FTW!)☆265Updated last year
- multitenant ModSecurity compatible WAF engine from Edgio☆89Updated last month
- WAFBench (wb) is a tool to measure the performance of WAF(Web Application Firewall) . It's based on latest code of ab (ApacheBench), and …☆108Updated 2 years ago
- Make TLS/SSL security mass scans with testssl.sh and import results into ElasticSearch☆109Updated 6 years ago
- Chef Cookbook which provisions apache+mod_security+owasp-crs☆37Updated 6 years ago
- Measures the effectiveness of your Web Application Firewall (WAF)☆77Updated last year
- Python Bindings for ModSecurity v3☆85Updated last year
- Logstash configuration filter set framework to parse modsecurity audit logs☆112Updated 4 years ago
- The official ModSecurity Docker images☆133Updated 2 years ago
- Elasticsearch for Offensive Security☆139Updated 4 years ago
- Signature-free approach library to detect injection and commanding attacks☆86Updated 3 years ago
- Terraform module which provides easy to configure AWS environment for running automated security scanning solutions at scheduled interval…☆45Updated 6 years ago
- CSP (Content Security Policy) reports server which forwards reports to Elasticsearch.☆57Updated last year
- Container Security Verification Standard☆58Updated 5 years ago
- Passive DNS collection using Zeek☆182Updated last year
- Documentation for the OWASP CRS project☆40Updated 4 years ago
- Vulnerability Data in ES☆146Updated 7 years ago
- Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website☆138Updated 4 years ago
- dockscan is security vulnerability and audit scanner for Docker installations☆220Updated 8 years ago
- Finding exposed secrets and personal data in GitLab☆195Updated 2 months ago
- Vagrant-based configurations intended for ModSecurity performance testing☆27Updated last year
- Machine Learning WAF Based☆92Updated 4 years ago
- Lightspin AWS IAM Vulnerability Scanner☆96Updated 3 years ago
- A command line security audit tool for Amazon Web Services☆81Updated 5 years ago
- Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and…☆271Updated 5 months ago
- A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform☆165Updated 5 months ago
- WAF Research☆179Updated 2 years ago
- collector/runner☆65Updated last year
- Vulnerability Scanner for Detecting Publicly Disclosed Vulnerabilities in Application Dependencies☆23Updated 5 years ago
- Hayat is a script for report and analyze Google Cloud Platform resources.☆80Updated 5 years ago