waf

📲 Automate WhatsApp messaging with this lightweight C library, allowing you to send messages directly from your code with ease.

Aggregation of lists of malicious IP addresses, to be blocked in the WAN > LAN direction, integrated into firewalls: FortiGate, Palo Alto, pfSense, IPtables ...

🔒 Simplify online identity with Anonymous Web Authentication, a secure, privacy-focused protocol that replaces passwords while proving humanity online.

Caddy Proxy Manager - a self-hosted, multi-tenant alternative to Nginx Proxy Manager. Point domains at backends with automatic HTTPS, WAF, GeoIP, WireGuard mesh, and an API + Terraform provider. Single Go binary.

A WAF secure by default and simple by design.

These are automated updated IP address blacklist/whitelist you can use to fetch and parse and put in your firewall, waf, null-routing, sinkhole or what ever you choose. The blacklists are not necessary threat actors, it's just lists i like to have ready and handy.

Extend Burp Suite functionality with a curated collection of scripts, custom extensions, and practical guides for security researchers.

Secure your Node.js applications with enterprise-grade authentication, session management, and OWASP-compliant security protocols.

Detect URL path and XFF injection flaws in Burp Suite while collecting and normalizing endpoints for faster testing and scan coverage

Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.

Interactive crawler IP intelligence dashboard for search, AI, and user-triggered fetchers.

Web Application Firewall Testing Framework - Go version

Filament UI for jeffersongoncalves/laravel-scanner-guard: list, filter and unban vulnerability-scanner bans from your admin panel

Open-source PHP CMS and enterprise web platform — page designer, e-commerce, built-in WAF. No Composer, no build step: upload, install, done.

QuantCDN — independent third-party profile of a public API surface, by API Evangelist. QuantCDN is an edge delivery, static site hosting, and cloud applications platform that lets teams generate, host, and maintain static and dynamic versions of their websites with a global CDN, WAF, edge functions, key-value storage, AI inference, and DNS manageme

Bunny.net — independent third-party profile of a public API surface, by API Evangelist. Bunny.net is a content-delivery and edge platform offering a global CDN, edge storage, video streaming, DNS, image optimisation, edge scripting, and WAF / security shielding. The Bunny.net Core Platform REST API at api.bunny.net manages account-level resources -

Web application security analysis of WAF defenses, XSS and SSRF vulnerabilities, bypass techniques, and mitigation strategies using OWASP Juice Shop.

The ModSecurity v3 dynamic module for nginx, as an artifact — a .so you load into your own nginx, not another nginx image to adopt.

Opt-in Lua modules for the nginx-lua image: shared-dict rate limiting, bot scoring, edge JWT validation, geo/ASN policy and request mirroring. A kit, not a WAF product.

An end-to-end web app security project covering SQLi/XSS exploitation in DVWA, Web Application Firewall deployment and tuning with ModSecurity + OWASP CRS, and live attack simulation on a cloud-hosted PrestaShop app on AWS, identifying critical vulnerabilities, validating mitigations, and documenting remediation and hardening steps.