Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 16 May 2021 14:26:14 -0500
From: Brandon Perry <bperry.volatile@...il.com>
To: oss-security@...ts.openwall.com
Subject: Re: Open Source WAF testing tools

Use Burp and test by hand?

> On May 16, 2021, at 2:01 PM, Martin O'Neil <martinoneil.cyber@...il.com> wrote:
> 
> Hi, list,
> 
> Does anybody know an open-source tool for testing Web Application Firewalls?
> 
> In an ideal case, with an out-of-the-box-ready CLI/UI, PDF reports, and a
> configurable set of payloads to test. I need it to check if my WAF
> deployment and rules work well.
> 
> I found at least 5 projects, all made by WAF vendors.
> 
> 1. https://github.com/wallarm/gotestwaf byWallarm
> 2. https://github.com/signalsciences/waf-testing-framework by Signal
> Sciences
> 3. https://github.com/fastly/ftw by Fastly
> 4. https://microsoft.github.io/WAFBench/ by Microsoft Azure WAF team
> 5. https://github.com/f5devcentral/f5-waf-tester by F5
> 
> The GoTestWAF project looks more active and supported by the community.
> Does anybody recommend some other GitHub repositories, preferably made by
> 3rd party folks?
> 
> Thanks
> Martin.


Download attachment "signature.asc" of type "application/pgp-signature" (834 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.