A LLM based rule management framework to design and develop good rules for your WAF

Animation engine for explanatory math videos

HexRays ctree visualization plugin

⛄ Possibly the smallest compiler ever

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

Data-driven test scaffold for Nginx C module and OpenResty Lua library development

C++ class for creating and computing arbitrary-length integers

A fast streaming JSON parsing library in C.

C++ wrapper for PCRE2 Library

Extremely fast non-cryptographic hash algorithm

Stack trace visualizer

Simple macro language extentions to systemtap

A firewall that utilizes the Linux kernel's XDP hook. The XDP hook allows for very fast network processing on Linux systems. This is great for dropping malicious traffic from a (D)DoS attack. IPv6 …

A collection of gdb tips. 100 maybe just mean many here.

Lua CJSON is a fast JSON encoding/parsing module for Lua

An Nginx module for bringing the power of "echo", "sleep", "time" and more to Nginx's config file

a filter module which can do both regular expression and fixed string substitutions for nginx

A high-performance regular expression matching library

Collection of quality safety articles. Awesome articles.

WAFBench (wb) is a tool to measure the performance of WAF(Web Application Firewall) . It's based on latest code of ab (ApacheBench), and adds support for real trace replaying, framework of testing …

A mighty CSS linter that helps you avoid errors and enforce conventions.

Web性能的方方面面:rocket:

Web Application Honeypot

丰富多样的 Web 弹出层组件，可轻松实现 Alert/Confirm/Prompt/ 普通提示/页面区块/iframe/tips等等几乎所有的弹出交互。目前已成为最多人使用的弹层解决方案

Guidance for mitigation web shells. #nsacyber

Docker implemented in around 100 lines of bash

Resources about network security, including: Proxy/GFW/ReverseProxy/Tunnel/VPN/Tor/I2P, and MiTM/PortKnocking/NetworkSniff/NetworkAnalysis/etc。More than 1700 open source tools for now. Post incoming.

PHP class to generate and verify Google Authenticator 2-factor authentication

BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more