Search Results for "http header injection"
Sort By:
Showing 18 open source projects for "http header injection"
View related business solutions-
$300 Free Credits to Build on Google CloudStart your next project with $300 in free Google Cloud credit. Spin up VMs, run containers, query petabytes in BigQuery, or build agents with Gemini Enterprise Agent Platform. Once your credits are used, keep building with 20+ always-free tier products including Compute Engine, Cloud Storage, GKE, and Cloud Run functions. No commitment required—just sign up and start building.
-
Our Free Plans just got better! | Auth0You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
-
1
SafeLine
Serve as a reverse proxy to protect your web services from attacks
SafeLine is a self-hosted WAF(Web Application Firewall) to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP traffic between a web application and the Internet. It typically protects web apps from attacks such as SQL injection, XSS, code injection, os command injection, CRLF injection, LDAP injection, XPath injection, RCE, XXE, SSRF, path traversal, backdoor, brute force, HTTP-flood, bot abuse, among others. By deploying a WAF in front of a web application, a shield is placed between the web application and the Internet. ... -
2
Beast
HTTP and WebSocket built on Boost.Asio in C++11
Beast is a header-only C++ library that provides low-level HTTP, WebSocket, and networking protocol building blocks on top of Boost.Asio. It is designed for developers who need to build interoperable clients, servers, proxies, gateways, or custom protocol components rather than using a high-level web framework. Beast follows Boost.Asio’s asynchronous model, so it fits naturally into event-driven C++ networking applications. -
3
frp
A Fast Reverse Proxy
frp stands for exactly what it is: a fast reverse proxy. It helps you expose a local server behind a NAT or firewall to the Internet. It is currently under development, but already supports TCP and UDP, as well as HTTP and HTTPS protocols where requests can be forwarded to internal services by domain name. It also has a P2P connect mode and many other nifty features. These include configuration files, environment variables, a dashboard that shows you frp's status and proxies' statistics... -
4
Coraza
OWASP Coraza WAF is a golang modsecurity compatible firewall library
Coraza is an open-source, enterprise-grade, high-performance Web Application Firewall (WAF) ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set. Coraza is a drop-in alternative to replace the soon-to-be abandoned Trustwave ModSecurity Engine and supports industry-standard SecLang rule sets. Coraza runs the OWASP Core Rule Set (CRS) to protect your web applications from a wide range of... -
Enterprise-grade ITSM, for every businessFreshservice is an intuitive, AI-powered platform that helps IT, operations, and business teams deliver exceptional service without the usual complexity. Automate repetitive tasks, resolve issues faster, and provide seamless support across the organization. From managing incidents and assets to driving smarter decisions, Freshservice makes it easy to stay efficient and scale with confidence.
-
5
Apache APISIX
The cloud-native API gateway
Provides rich traffic management features such as load balancing, dynamic upstream, canary release, circuit breaking, authentication, observability, and more. Based on the Nginx library and etcd. Cloud-native microservices API gateway, delivering the ultimate performance, security, open source and scalable platform for all your APIs and microservices. Apache APISIX is based on Nginx and etcd. Compared with traditional API gateways, APISIX has dynamic routing and plug-in hot loading, which is... -
6
Privoxy
HTTP proxy to block ads and customize webpages
Privoxy is a non-caching web proxy with advanced filtering capabilities for enhancing privacy, modifying web page data and HTTP headers, controlling access, and removing ads and other obnoxious Internet junk. Privoxy has a flexible configuration and can be customized to suit individual needs and tastes. It has application for both stand-alone systems and multi-user networks. -
7
OWASP ModSecurity CRS
OWASP ModSecurity Core Rule Set (CRS) Project
The OWASP ModSecurity Core Rule Set (CRS) is a curated, generic Web Application Firewall rule set that detects and blocks common attack categories across most web apps. It focuses on broad protection—SQL injection, cross-site scripting, local/remote file inclusion, command injection, and protocol violations—without requiring app-specific knowledge. Rules are organized into paranoia levels so operators can tune detection aggressiveness and balance false positives against coverage. An anomaly-scoring model accumulates rule hits per request, enabling nuanced blocking thresholds and easier incident triage. ... -
8
inspectIT
inspectIT is the leading Open Source APM
inspectIT is the leading open-source APM (application performance management) tool for monitoring and analyzing your Java(EE) software applications. Various sensors capture end-to-end information for every request from the end user, to the business tier all the way to the backends. inspectIT is based on an application-centric, business-focused approach, where each technical request is mapped to an application and to a business use case. With inspectIT you always know about the health of your... -
9
Zeus Scanner
Advanced reconnaissance utility
...It also supports proxy configurations, Tor proxy compatibility, and Tor browser emulation for flexible routing during authorized assessments. Zeus-Scanner includes checks for issues such as XSS, SQL injection, clickjacking, exposed admin panels, port scanning, whois lookup, and header protection. It is most useful for penetration testers and researchers who need a broad reconnaissance toolkit, though its older Python 2-style setup makes environment compatibility important. -
Secure File Transfer for Windows with Cerberus by RedwoodCerberus supports unlimited users and connections on a single IP, with built-in encryption, 2FA, and a browser-based web client — all deployable in under 15 minutes with a 25-day free trial.
-
10
Ethernet POWERLINK XDD Tool Suite
Provides eclipse plugins for XDD edit, validation and OD generation.
The plugins include functionality to edit and check CN / MN XDD / XDC files against the DS311 V1.2.0 and the DS 301 1.3.0 specification. Another plugin enables the user to generate the object dictionary header file from an XDD / XDC file for the openPOWERLINK (https://goo.gl/Cg77Oi) implementation. Please note that the validation functionality works properly for Controlled and Managing Node XDD / XDC files. Please use the update site to install the plugin in your eclipse environment: http://sourceforge.net/projects/xddpluginsuite.openconf.p/files/update_site/ User Manual: https://goo.gl/hvtLAq XDD editor plugin user manual: https://goo.gl/Fo5pUQ Install via Eclipse marketplace: https://goo.gl/eAZAn9 Link to the openCONFIGURATOR parent project: https://sourceforge.net/projects/openconf/ -
11
TOFFEE-DataCenter
Linux Server and Data-Center WAN Optimization
TOFFEE-DataCenter is the new TOFFEE variant meant for Data-Center, Server, HPC, Load Balancing, Cluster/Cloud Computing and SDN deployments. With TOFFEE-DataCenter (and or TOFFEE), OEMs and other equipment vendors can make use of this platform/stack, integrate, port and build WAN Optimization devices/appliances on to their existing product range. Or build a dedicated WAN Optimization hardware product series via the same. -
12
lua-resty-waf
High-performance WAF built on the OpenResty stack
...The result is a flexible, scriptable WAF that pairs the performance of NGINX with the expressiveness of Lua for nuanced HTTP defense. -
13
Pop Framework
Use Java bean as model of web page, reference beans in hyperlinks
Pop Framework (or Pop), http://www.popframework.net, is a bean-based MVC framework for Java/J2EE web applications. Pop implements IoC, Dependency Injection, and AOP. Pop provides annotations for users to define and reference a bean. Pop can help users to customize a bean, a scope, a factory and a reference in object-oriented way. Pop treats a bean as the model of a web page (JSP or servlet), the webpage itself is a view of the bean. -
14
Evolution 1.0.2.2 RS
Modify Request Headers And Response Headers
Update Version 1.0.2.2 RS · Added New Data, Avaible Single Data And Double Data. · Options Extended Borders · Added Tun Sock's Tap · Bugs Fix For Header Evolution Version 1.0.2.1 RS · Methode · Encrype Line · Mode Line · End Line · Query · Add Header · Replacer · Network · A & T Command · Multi Connection · Setting Proxy IDM · Setting Proxy IE · HTTP Ping Manual URL · Added Encrypt Line LF · Mode Line Maximum ( Infinity ) · Custom Header 1 · Custom Header 2 · Header Log · Clear Manual Header Log · Save / Copy Header Log With a nice and simple interface, a decent feature pack and easy enough to be handled by less experienced users, Evolution RS puts up a good performance and earns a place among the recommended tools in its category... -
15
Evolution 1.0.2.0
Modify Request Headers, Response Headers, Dialer, Tun Sock's Tap
Evolution Version 1.0.1.0 · Methode · Encrype Line · Mode Line · End Line · Query · Add Header · Replacer · Network · A & T Command · Multi Connection · Setting Proxy IDM With a nice and simple interface, a decent feature pack and easy enough to be handled by less experienced users, Evolution puts up a good performance and earns a place among the recommended tools in its category. Update Evolution Version 1.0.2.0 · New UI Tab's · HTTP Ping Manual URL · Added Encrypt Line LF · Mode Line Maximum ( Infinity ) · Custom Header 1 · Custom Header 2 · Header Log · Clear Manual Header Log · Save / Copy Header Log · IP Hunter, Auto Route Dial, Auto Dial If DC · Tun Socks Tap · AT Qos Auto Show Opsel, RSSI, RAT, Qos Uplink/Downlink, APN · Don't ReUpload File [!] ... -
16
Neustar-Webtop
HTTP header aggregation tool
Based on dnstop, webtop reads either a live Ethernet stream or a pre-captured file of packets, and performs aggregations based on standard HTTP headers. It can operate in an interactive mode, as well as produce reports for inclusion into incident reports, et cetera. -
17
HTTP Anti Flood/DoS Security Module
Detect Flooder IPs, Reduce Attack Surface against HTTP Flood Attacks
This module provides attack surface reduction enhancements against the HTTP Flood Attacks at the web application level. Massive crawling/scanning tools, HTTP Flood tools can be detected and blocked by this module via htaccess, firewall or iptables, etc. (like mod_evasive) You can use this module by including "iosec.php" to any PHP file which wants to be protected. You can test module here: http://www.iosec.org/test.php (demo) Watch the Proof of Concept video:... -
18
mod_accounting is a simple Apache module that can record traffic statistics into a database (bytes in/out per http request). NOTE: this project has been abandoned years ago. The code in the repository needs some fixing in order to be usable. Also, it needs a security review, especially in the query building part: as it is, %h, %R and %e placeholders could lead to SQL injection. If anyone wishes to maintain the project, just let me know.
- Previous
- You're on page 1
- Next
