"Web application firewalls (WAF)" , The today's requirement to secure the web applications without
changing the existing infrastructure.But at the same time, it is a big risk in case of WAF behavior and false positives (legitimate traffic blocking). This talk will demonstrates a new concept to evaluate
any WAF without taking risk of putting any WAFs into inline mode.Everything will be in learning or in passive mode.This project describes concept of one special engine,which can be used to evaluate any WAFs with zero risk to the end user (website owner),no matter whether its vendor supports Passive mode or not(i.e. modsecurity or naxsi).
Features
- Passively evaluate any Web Application Firewall
- Supports phase-3 (RESPONSE_HEADERS) and phase-4 (RESPONSE_BODY) operations for mod_security.
- Actual IP Impersonation
- Generates log in Apache and mod_security format
Categories
Web Application Firewalls (WAF)
You Might Also Like
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of w-o-f!