Tools
evilwaf
matrixleons/evilwaf
An authorized-testing MITM proxy and WAF vulnerability scanner that rotates TCP, TLS, and HTTP/2 fingerprints and hunts for origin IPs behind a firewall.
Topics
Related projects
api-firewall654A lightweight, high-performance API firewall that validates requests and responses against OpenAPI or GraphQL schemas, acting as a reverse proxy to protect REST and GraphQL endpoints.
SafeLine23.3kA self-hosted web application firewall and reverse proxy that protects websites from injections, XSS, bots, and abuse.
rathole14.4krathole is a lightweight, high-performance reverse proxy for NAT traversal written in Rust. It exposes services behind NAT through a public server, serving as an alternative to frp and ngrok.
NetExec6kA network execution and penetration testing tool for validating credentials and running commands across SMB, WinRM, LDAP and other protocols, maintained by the community as the successor to CrackMapExec.
core4.8kThe GUI, API and systems backend of OPNsense, an open-source FreeBSD-based firewall and routing platform for managing network security and services.
Check-Risk-WAF1.6kAn all-in-one web application firewall with anti-bot and anti-DDoS protection at L3, L4 and L7, custom WAF rules, rate limiting, AI attack analysis and SIEM integration, on-premises or SaaS.