OpenWAF-v0.0.4 OpenWAF是第一个全方位开源的Web应用防护系统（WAF），他基于

文件名称: OpenWAF-v0.0.4

所属分类: 网络安全

开发工具:

文件大小: 5.57mb

下载次数: 1

上传时间: 2017-03-28

提供者: m2905*****

下载 (5.57mb)

不能下载？报告错误

详细说明： OpenWAF是第一个全方位开源的Web应用防护系统（WAF），他基于nginx_lua API分析HTTP请求信息。OpenWAF由行为分析引擎和规则引擎两大功能引擎构成。其中规则引擎主要对单个请求进行分析，行为分析引擎主要负责跨请求信息追踪。规则引擎的启发来自modsecurity及freewaf(lua-resty-waf)，将ModSecurity的规则机制用lua实现。基于规则引擎可以进行协议规范，自动工具，注入攻击，跨站攻击，信息泄露，异常请求等安全防护，支持动态添加规则，及时修补漏洞。行为分析引擎包含基于频率的模糊识别，防恶意爬虫，人机识别等防探测模块，防CSRF，防CC，防提权，文件上传防护等防攻击模块，cookie防篡改，防盗链，自定义响应头，攻击响应页面等防信息泄露模块。除了两大引擎之外，还包含统计，日志，攻击响应页面，接入规则等基础模块。除了已有的功能模块，OpenWAF还支持动态修改配置，动态添加第三方模块，使得在不重启引擎中断业务的条件下，升级防护。 OpenWAF支持将上述功能封装为策略，不同的web application应用不同的策略来防护。将来还会打造云平台，策略还可分享供他人参考。 ...展开收缩

(系统自动生成,下载前可以参看下载内容)

下载文件列表

压缩包 : OpenWAF.zip 列表
OpenWAF/
OpenWAF/.gitignore
OpenWAF/app/
OpenWAF/app/twaf_access.lua
OpenWAF/app/twaf_api.lua
OpenWAF/app/twaf_balancer.lua
OpenWAF/app/twaf_body_filter.lua
OpenWAF/app/twaf_header_filter.lua
OpenWAF/app/twaf_init.lua
OpenWAF/app/twaf_log.lua
OpenWAF/app/twaf_rewrite.lua
OpenWAF/app/twaf_ssl_cert.lua
OpenWAF/Changelog
OpenWAF/conf/
OpenWAF/conf/category.json
OpenWAF/conf/ssl/
OpenWAF/conf/ssl/nginx.crt
OpenWAF/conf/ssl/nginx.key
OpenWAF/conf/twaf_access_rule.json
OpenWAF/conf/twaf_api.conf
OpenWAF/conf/twaf_default_conf.json
OpenWAF/conf/twaf_main.conf
OpenWAF/conf/twaf_policy_conf.json
OpenWAF/conf/twaf_server.conf
OpenWAF/Dockerfile
OpenWAF/lib/
OpenWAF/lib/openresty/
OpenWAF/lib/openresty/configure
OpenWAF/lib/openresty/lua-geoip-0.1.2/
OpenWAF/lib/openresty/lua-geoip-0.1.2/AUTHORS
OpenWAF/lib/openresty/lua-geoip-0.1.2/COPYRIGHT
OpenWAF/lib/openresty/lua-geoip-0.1.2/HISTORY
OpenWAF/lib/openresty/lua-geoip-0.1.2/Makefile
OpenWAF/lib/openresty/lua-geoip-0.1.2/README.md
OpenWAF/lib/openresty/lua-geoip-0.1.2/rockspec/
OpenWAF/lib/openresty/lua-geoip-0.1.2/rockspec/lua-geoip-0.1-1.rockspec
OpenWAF/lib/openresty/lua-geoip-0.1.2/rockspec/lua-geoip-0.1.1-1.rockspec
OpenWAF/lib/openresty/lua-geoip-0.1.2/rockspec/lua-geoip-0.1.2-1.rockspec
OpenWAF/lib/openresty/lua-geoip-0.1.2/rockspec/lua-geoip-scm-1.rockspec
OpenWAF/lib/openresty/lua-geoip-0.1.2/src/
OpenWAF/lib/openresty/lua-geoip-0.1.2/src/city.c
OpenWAF/lib/openresty/lua-geoip-0.1.2/src/country.c
OpenWAF/lib/openresty/lua-geoip-0.1.2/src/database.c
OpenWAF/lib/openresty/lua-geoip-0.1.2/src/database.h
OpenWAF/lib/openresty/lua-geoip-0.1.2/src/lua-geoip.c
OpenWAF/lib/openresty/lua-geoip-0.1.2/src/lua-geoip.h
OpenWAF/lib/openresty/lua-geoip-0.1.2/test/
OpenWAF/lib/openresty/lua-geoip-0.1.2/test/test.lua
OpenWAF/lib/openresty/lua-geoip-0.1.2/TODO
OpenWAF/lib/openresty/lua-libinjection-3.9.1/
OpenWAF/lib/openresty/lua-libinjection-3.9.1/.gitignore
OpenWAF/lib/openresty/lua-libinjection-3.9.1/.Makefile.swp
OpenWAF/lib/openresty/lua-libinjection-3.9.1/.travis.yml
OpenWAF/lib/openresty/lua-libinjection-3.9.1/ChangeLog
OpenWAF/lib/openresty/lua-libinjection-3.9.1/cicada/
OpenWAF/lib/openresty/lua-libinjection-3.9.1/cicada/cicada-event.py
OpenWAF/lib/openresty/lua-libinjection-3.9.1/cicada/cicada-pump.py
OpenWAF/lib/openresty/lua-libinjection-3.9.1/cicada/cicada-web.py
OpenWAF/lib/openresty/lua-libinjection-3.9.1/cicada/cicada.py
OpenWAF/lib/openresty/lua-libinjection-3.9.1/cicada/events.py
OpenWAF/lib/openresty/lua-libinjection-3.9.1/cicada/libinjection_test.py
OpenWAF/lib/openresty/lua-libinjection-3.9.1/cicada/pollers.py
OpenWAF/lib/openresty/lua-libinjection-3.9.1/cicada/publishers.py
OpenWAF/lib/openresty/lua-libinjection-3.9.1/cicada/shell.py
OpenWAF/lib/openresty/lua-libinjection-3.9.1/cicada/sourcecontrol.py
OpenWAF/lib/openresty/lua-libinjection-3.9.1/cicada/StateRedis.py
OpenWAF/lib/openresty/lua-libinjection-3.9.1/configure-clang.sh
OpenWAF/lib/openresty/lua-libinjection-3.9.1/configure-gcc-hardened.sh
OpenWAF/lib/openresty/lua-libinjection-3.9.1/configure-gcov.sh
OpenWAF/lib/openresty/lua-libinjection-3.9.1/configure-gprof.sh
OpenWAF/lib/openresty/lua-libinjection-3.9.1/COPYING
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/false_positives.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/README.md
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-arithmetic_blind_sqli.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-arithmetic_variations.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-arneswinnen.net-boolean.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-arneswinnen.net-time.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-comparitiveprecomputation.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-edb-17934.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-forums.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-fullqueries.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-fuzz-ischi.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-hackers.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-ibm.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-insert_attacks.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-isc_sans.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-misc.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-mysql-implicit.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-phpids.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-rsalgado-bhusa2013.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-spiderlabs-201107.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-spiderlabs-201112.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-spiderlabs-201205.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-sqlmap-20130419.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-sqlmap.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-sqlmap_examples.txt
OpenWAF/lib/openresty/lua-libinjection-3.9.1/data/sqli-themole.txt