nccgroup/BurpSuiteHTTPSmuggler
A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
Language: Java
#burpsuite #burpsuite_extender #bypass #waf
Stars: 107 Issues: 0 Forks: 7
https://github.com/nccgroup/BurpSuiteHTTPSmuggler

fabriziosalmi/patterns
Automated OWASP CRS and Bad Bot Detection for Caddy, Nginx, Apache, Traefik and HaProxy
Language: Python
#apache #bad_requests #bot_detection #caddy #caddyserver #crs #firewall_configuration #firewall_rules #malicious_url_detection #mod_security #nginx #owasp #waf #web_application_firewall
Stars: 115 Issues: 4 Forks: 1
https://github.com/fabriziosalmi/patterns

fabriziosalmi/caddy-waf
Caddy WAF (OWASP rule-based filtering, IP and DNS filtering, rate limiting, GeoIP)
Language: Go
#caddy #caddy_plugin #caddyserver #security_tools #waf #web_application_firewall #web_security
Stars: 168 Issues: 0 Forks: 1
https://github.com/fabriziosalmi/caddy-waf

pingooio/pingoo
The fast and secure Load Balancer / API Gateway / Reverse Proxy with built-in service discovery, GeoIP, WAF, bot protection and much more - https://pingoo.io
Language: Rust
#akamai #anti_bot #apache2 #api #api_gateway #captcha #cloudflare #fastly #firewall #haproxy #load_balancer #nginx #pingoo #proxy #quic #reverse_proxy #rust #security #service_discovery #waf
Stars: 230 Issues: 6 Forks: 5
https://github.com/pingooio/pingoo

ikow/php2shell-poc
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
Language: Python
#cve_2026_109618 #cve_2026_109619 #detection_rules #exploit #php_exploit #php_security #php2shell #poc #rce #session_upload_progress #suricata_rules #vulnerability_research #waf_rules #wordpress_security
Stars: 1205 Issues: 2 Forks: 441
https://github.com/ikow/php2shell-poc