Tools
identYwaf
stamparm/identYwaf
identYwaf is a lightweight blind WAF fingerprinting tool that sends non-destructive payloads and infers which of 95 web protection products guards a site.
Topics
Related projects
Check-Risk-WAF1.6kAn all-in-one web application firewall with anti-bot and anti-DDoS protection at L3, L4 and L7, custom WAF rules, rate limiting, AI attack analysis and SIEM integration, on-premises or SaaS.
SafeLine23.3kA self-hosted web application firewall and reverse proxy that protects websites from injections, XSS, bots, and abuse.
wazuh17.7kWazuh is an open-source security platform combining XDR and SIEM. Endpoint agents and a management server collect and analyze logs to deliver intrusion detection, file integrity monitoring, vulnerability detection, configuration assessment and incident response across on-premises and cloud workloads.
crowdsec15.6kCrowdSec is an open-source IDS/IPS, WAF and bot-detection engine. It analyzes logs and HTTP requests, triggers remediation through firewall and proxy components, and shares a crowdsourced blocklist of malicious IPs so one attack protects the whole community.
DVWA14kDamn Vulnerable Web Application (DVWA) is a deliberately vulnerable PHP and MariaDB web app for practicing common web vulnerabilities at several difficulty levels. It is widely used by security professionals, students and teachers for legal, hands-on security training.
routersploit13.3kRouterSploit is an exploitation framework dedicated to embedded devices such as routers. It bundles exploit, credential-testing, scanner and payload modules in an interactive shell, supporting penetration testing and security research on network appliances.