Added a WAF testing framework developed by the OWASP Core Ruleset (CRS) team.

This commit is contained in:
intriguingblackmesa 2021-03-09 17:08:46 +01:00 committed by GitHub
parent ba07fe1217
commit a3eec1c1f2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -3861,6 +3861,7 @@ User-Agent: Mozilla/4.0 (compatible; MSIE5.01; Windows NT)
- [Lightbulb Framework](https://github.com/lightbulb-framework/lightbulb-framework) - A WAF testing suite written in Python.
- [WAFBench](https://github.com/microsoft/wafbench) - A WAF performance testing suite by [Microsoft](https://github.com/microsoft).
- [WAF Testing Framework](https://www.imperva.com/lg/lgw_trial.asp?pid=483) - A WAF testing tool by [Imperva](https://imperva.com).
- [Framework for Testing WAFs (FTW)](https://github.com/coreruleset/ftw) - A framework by the [OWASP CRS team](https://coreruleset.org/) that helps to provide rigorous tests for WAF rules by using the OWASP Core Ruleset V3 as a baseline.
### Evasion:
- [WAFNinja](https://github.com/khalilbijjou/wafninja) - A smart tool which fuzzes and can suggest bypasses for a given WAF by [@khalilbijjou](https://github.com/khalilbijjou/).