kungec / kunpanel
坤面板 KunPanel —— Go 单二进制轻量级服务器运维管理面板(网站/应用商店/Docker/WAF/监控/终端),支持 Linux 全系统与 Windows 一键安装。Single-binary server management panel in Go.
kungec / kunpanel
wangwanjie / gately
Open-source, auditable network gateway toolkit: DDNS, STUN traversal, port forwarding, reverse proxy, ACME certificates, WAF, Tailscale, frp in a single binary.
WeWaffles / OneLineage
Hot-switch a rooted Samsung phone between One UI and a LineageOS 23.2 GSI via a userspace pivot_root container
appwrite / appwrite
The open-source cloud for agents & devs. Including Auth, Databases, Storage, Functions, Messaging, Hosting, Realtime, WAF and more
chaitin / SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
crowdsecurity / crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
bunkerity / bunkerweb
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
NopeCHALLC / nopecha-extension
Automated CAPTCHA solver for your browser. Works with Selenium, Puppeteer, Playwright, and more.
owasp-modsecurity / ModSecurity
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.
wafer-ai / gpu-perf-engineering-resources
A curated resource list for learning AI performance engineering, from GPU fundamentals to production inference.
Mr-xn / BurpSuite-collections
有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file
corazawaf / coraza
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
kejilion / sh
KEJILION.SH 一款全功能的Linux管理脚本！An all-in-one Linux management script!
padrino / padrino-framework
Padrino is a full-stack ruby framework built upon Sinatra.
waf / CSharpRepl
A command line C# REPL with syntax highlighting – explore the language, libraries and nuget packages interactively.
coreruleset / coreruleset
OWASP CRS (Official Repository)
FWGS / xash3d-fwgs
Xash3D FWGS engine
sleeyax / burp-awesome-tls
Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.
owasp-modsecurity / ModSecurity-nginx
ModSecurity v3 Nginx Connector
roxy-wi / roxy-wi
Web interface for managing Haproxy, Nginx, Apache and Keepalived servers
wallarm / gotestwaf
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
Safe3 / uusec-waf
Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.
NopeCHALLC / nopecha-python
Automated CAPTCHA solver for Python.
C0nw0nk / Nginx-Lua-Anti-DDoS
A Anti-DDoS script to protect Nginx web servers using Lua with a HTML Javascript based authentication puzzle inspired by Cloudflare I am under attack mode an Anti-DDoS authentication page protect yourself from every attack type All Layer 7 Attacks Mitigating Historic Attacks DoS DoS Implications DDoS All Brute Force Attacks Zero day exploits Social Engineering Rainbow Tables Password Cracking Tools Password Lists Dictionary Attacks Time Delay Any Hosting Provider Any CMS or Custom Website Unlimited Attempt Frequency Search Attacks HTTP Basic Authentication HTTP Digest Authentication HTML Form Based Authentication Mask Attacks Rule-Based Search Attacks Combinator Attacks Botnet Attacks Unauthorized IPs IP Whitelisting Bruter THC Hydra John the Ripper Brutus Ophcrack unauthorized logins Injection Broken Authentication and Session Management Sensitive Data Exposure XML External Entities (XXE) Broken Access Control Security Misconfiguration Cross-Site Scripting (XSS) Insecure Deserialization Using Components with Known Vulnerabilities Insufficient Logging & Monitoring Drupal WordPress Joomla Flash Magento PHP Plone WHMCS Atlassian Products malicious traffic Adult video script avs KVS Kernel Video Sharing Clip Bucket Tube sites Content Management Systems Social networks scripts backends proxy proxies PHP Python Porn sites xxx adult gaming networks servers sites forums vbulletin phpbb mybb smf simple machines forum xenforo web hosting video streaming buffering ldap upstream downstream download upload rtmp vod video over dl hls dash hds mss livestream drm mp4 mp3 swf css js html php python sex m3u zip rar archive compressed mitigation code source sourcecode chan 4chan 4chan.org 8chan.net 8ch 8ch.net infinite chan 8kun 8kun.net anonymous anon tor services .onion torproject.org nginx.org nginx.com openresty.org darknet dark net deepweb deep web darkweb dark web mirror vpn reddit reddit.com adobe flash hackthissite.org dreamhack hack hacked hacking hacker hackers hackerz hackz hacks code coding script scripting scripter source leaks leaked leaking cve vulnerability great firewall china america japan russia .gov government http1 http2 http3 quic q3 litespeedtech litespeed apache torrents torrent torrenting webtorrent bittorrent bitorrent bit-torrent cyberlocker cyberlockers cyber locker cyberbunker warez keygen key generator free irc internet relay chat peer-to-peer p2p cryptocurrency crypto bitcoin miner browser xmr monero coinhive coin hive coin-hive litecoin ethereum cpu cycles popads pop-ads advert advertisement networks banner ads protect ovh blazingfast.io amazon steampowered valve store.steampowered.com steamcommunity thepiratebay lulzsec antisec xhamster pornhub porn.com pornhub.com xhamster.com xvideos xvdideos.com xnxx xnxx.com popads popcash cpm ppc
ADD-SP / ngx_waf
Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块
samwafgo / SamWaf
SamWaf开源轻量级网站防火墙，完全私有化部署 SamWaf is a lightweight, open-source web application firewall for small companies, studios, and personal websites. It supports fully private deployment, encrypts data stored locally, is easy to start, and supports Linux and Windows 64-bit.
NopeCHALLC / nopecha-nodejs
Automated CAPTCHA solver for Node.js.
Marven11 / Fenjing
专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF
jx-sec / jxwaf
JXWAF是一款基于AI大模型的Web应用防火墙
stanislav-web / OpenDoor
OWASP Web Recon & Directory Discovery Platform
Check-Risk-WAF / Check-Risk-WAF
Check Risk WAF is an all-in-one Web Application Firewall with Anti-Bot and Anti-DDoS protection at L3, L4, and L7. Available on-premises or as SaaS, it protects web apps against OWASP Top 10 attacks, CWE vulnerabilities, botnets, and DoS/DDoS. Free and unlimited for everyone, forever for personal, non-commercial use.
maxlerebourg / crowdsec-bouncer-traefik-plugin
Traefik plugin for Crowdsec - WAF and IP protection
aws-solutions / aws-waf-security-automations
This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
fabriziosalmi / caddy-waf
Caddy WAF (Regex Rules, IP and DNS filtering, Rate Limiting, GeoIP, Tor, Anomaly Detection)
elixir-waffle / waffle
Flexible file upload and attachment library for Elixir
jbe2277 / waf
Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
tempesta-tech / tempesta
Web application acceleration, advanced DDoS protection and web security
chushuai / wscan
Wscan is a web security scanner that focuses on web security, dedicated to making web security accessible to everyone.
corazawaf / coraza-caddy
OWASP Coraza middleware for Caddy. It provides Web Application Firewall capabilities
chen2he / orange-cloud
Open-source native Cloudflare client for iPhone, iPad & Apple Watch — sign in with OAuth, no API tokens to paste. Native Android app (Kotlin/Compose) in development.
gyli / PyWaffle
🧇 Make Waffle Charts in Python.
waferbaby / usesthis
A nerdy little interview website, asking people from all walks of life what they use to get the job done.
JasonLovesDoggo / caddy-defender
Caddy module to block or manipulate requests originating from AIs or cloud services trying to train on your websites
wargio / naxsi
NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
Waffle / waffle
Enable drop-in Windows Single Sign On for popular Java web servers.
eldarshiraliyev / BugScanner
🐛 Advanced web vulnerability scanner with 5-rule false-positive reduction, WAF evasion, and modern HTML reports
tnAnGel / Aegis
Self-hosted anti-DDoS reverse proxy and WAF in Rust — WAF, JA3/JA4 fingerprinting, eBPF/XDP, challenge ladder, HTTP/3
GronedWaffel / etahen-11.00-13.60
Unofficial etaHEN 2.5B unified PS5 11.00-13.60 port: Toolbox, plugins and PS4/PS5 FPS. Original etaHEN by LightningMods and contributors.
divinelabio / Aegis
Next-Gen Selfhosted Web Application Firewall (WAF) & Edge Reverse Proxy built in Go. Real-time threat defense, L7 traffic control, and unified admin console.
xiabai2008 / ruoyi-scan
RuoYi (若依) dedicated vulnerability scanner: plugin architecture, three-state verdict, WAF bypass, exploit chains, AI POC generation, nuclei compatible. 若依专项漏洞扫描器
kiwi0719 / jev-edge
Typed-judgment admission control at the traffic edge: three-layer prompt-injection and abuse filter for nginx/OpenResty, powered by TypeSafe Jev. Fail-open, cached, hot-reloadable.
Nawaf-Rayhan585 / Face-Recognition
Lightweight face recognition template with Jarvis-style overlay — pure OpenCV (Haar + LBPH), runs on any laptop
kunal12203 / swafra
—
wafarifki / YourFav
YourFav - Tools for Instant favicon generator. Upload one image, get every size bundled in a ZIP with ready-to-use integration code.
Nawaf-Rayhan585 / LPR-Vehicle-License-Detection
Vehicle detection + license plate reading with YOLOv8 and EasyOCR, JSON report export (Streamlit)
WestWaters / pollard-weights
A tiered-memory system design for workloads that don't fit in RAM: measure the working set, pin the hot tier, stream the cold tier from flash. Ships the residency calculator, measurement harnesses, and the build recipes behind it. Predictions validated against public benchmarks.