Security
Please visit
web/SSL page.https://github.com/sonertari/UTMFW
Network Intrusion Detection System (NIDS) engine
Network Intrusion Prevention System (NIPS) engine
Network Security Monitoring (NSM) engine
https://doc.pfsense.org/index.php/Setup_Snort_Package
https://en.wikipedia.org/wiki/OSSEC
log analysis, integrity checking, Windows registry monitoring, rootkit detection, time-based alerting, and active response.
https://ossec.github.io/docs/manual/supported-systems.html
Suricata is a network IDS, IPS and NSM engine.
https://github.com/OISF/suricata
https://suricata-ids.org/features/all-features/
w/ pfSense: http://elatov.github.io/2016/11/setup-suricata-on-pfsense/
w/ Mikrotik: https://forum.mikrotik.com/viewtopic.php?t=111727
https://www.aldeid.com/wiki/Suricata-vs-snort
https://github.com/infoslack/awesome-web-hacking
http://www.toolswatch.org/2017/02/2016-top-security-tools-as-voted-by-toolswatch-org-readers/
https://www.owasp.org/index.php/Category:Vulnerability_Scanning_Tools
OWASP Zed Attack Proxy:
https://github.com/zaproxy/zaproxy/wiki/Introduction
https://null-byte.wonderhowto.com/how-to/hack-like-pro-hack-web-apps-part-6-using-owasp-zap-find-vulnerabilities-0168129/ OWASP Web Testing Framework: https://owtf.github.io/
OWASP Web Testing Environment Project: https://www.owasp.org/index.php/OWASP_Web_Testing_Environment_Project
https://github.com/sullo/nikto
https://github.com/subgraph/Vega/wiki
https://github.com/anilbaranyelken/tulpar
https://github.com/dpnishant/raptor
https://github.com/ethicalhack3r/DVWA
a PHP/MySQL web application that is damn vulnerable.
https://www.youtube.com/playlist?list=PL0-xwzAwzllx4w5OYdRoVTqlNvQ7xALNM
https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual
support Apache, IIS7 or Nginx
Nginx: must be compiled with the source code of the main server
https://modsecurity.org/application_coverage.html
http://pfsensesetup.com/wp-content/uploads/2014/10/pfsense_modsecurity01.png
https://coreruleset.org/ https://hub.docker.com/r/owasp/modsecurity/
https://hub.docker.com/r/nodeintegration/nginx-modsecurity/
https://github.com/alexazhou/VeryNginx
https://www.nginx.com/products/nginx-waf/#free-trial
https://github.com/nbs-system/naxsi (Nginx Anti XSS & SQL Injection)
https://github.com/p0pr0ck5/lua-resty-waf
High-performance WAF built on the OpenResty stack
https://www.cloudflare.com/waf/
https://aws.amazon.com/waf/
https://www.aliyun.com/product/waf
http://help.sonicwall.com/help/sw/eng/8112/8/0/0/content/Chapter2_Overview.03.28.html
https://www.cisco.com/c/en/us/products/collateral/application-networking-services/ace-web-application-firewall/data_sheet_c78-458627.html
Last modified 4mo ago