"Web application firewalls (WAF)" , The today's requirement to secure the web applications without
changing the existing infrastructure.But at the same time, it is a big risk in case of WAF behavior and false positives (legitimate traffic blocking). This talk will demonstrates a new concept to evaluate
any WAF without taking risk of putting any WAFs into inline mode.Everything will be in learning or in passive mode.This project describes concept of one special engine,which can be used to evaluate any WAFs with zero risk to the end user (website owner),no matter whether its vendor supports Passive mode or not(i.e. modsecurity or naxsi).

Features

  • Passively evaluate any Web Application Firewall
  • Supports phase-3 (RESPONSE_HEADERS) and phase-4 (RESPONSE_BODY) operations for mod_security.
  • Actual IP Impersonation
  • Generates log in Apache and mod_security format

Project Samples

Play Video Step-1 ( Run through Command line using "java -jar" switch Step-2 (Choose NIC, Website and WAF URL) Step-4 (See the attack is performed over "demo.testfire.net" but you can see the blocking log on "WOF" console ) Original Request Initiated by browser Simulated Request identical to Browser's request generated by "WOF" Live Capture log generated by "WOF"

Project Activity

See All Activity >

Categories

Web Application Firewalls (WAF)

Follow w-o-f

w-o-f Web Site

Other Useful Business Software
Ship Agents Faster Icon
Ship Agents Faster

Transform your applications and workflows into powerful agentic systems at global scale.

Gemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
Get Started Free
Rate This Project
Login To Rate This Project

User Reviews

Be the first to post a review of w-o-f!

Additional Project Details

Registered

2013-08-22
Report inappropriate content