{"slug": "firewalls", "title": "Firewalls", "description": "Attack the castle doors.", "sections": [{"title": "Defensive Security", "groups": [{"title": "Firewall Hardware", "tools": [{"name": "Netgate", "url": "https://shop.netgate.com/", "description": "Open-source company that provides high-performance and affordable appliance and software-based firewall, VPN, and routing solutions.", "_anchor": "netgate", "_section": "Defensive Security", "_group": "Firewall Hardware", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/netgate/"}, {"name": "UniFi", "url": "https://www.ui.com/", "description": "Full-Stack Networking. Home to Enterprise grade equipment.", "_anchor": "unifi", "_section": "Defensive Security", "_group": "Firewall Hardware", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/unifi/"}, {"name": "Untangle", "url": "https://www.untangle.com/untangle-ng-firewall/appliances/", "description": "Network Security Framework provides cloud-managed security and connectivity.", "_anchor": "untangle", "_section": "Defensive Security", "_group": "Firewall Hardware", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/untangle/"}]}, {"title": "Firewall Software", "tools": [{"name": "ClearOS", "url": "https://clearos.com/", "description": "Designed for use in small and medium enterprises as a network gateway.", "_anchor": "clearos", "_section": "Defensive Security", "_group": "Firewall Software", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/clearos/"}, {"name": "Endian", "url": "https://sourceforge.net/projects/efw/", "description": "A turn-key linux security distribution that makes your system a full featured security appliance.", "_anchor": "endian", "_section": "Defensive Security", "_group": "Firewall Software", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/endian/"}, {"name": "ipfire", "url": "https://github.com/ipfire/ipfire-2.x", "description": "The Open Source Firewall.", "repo": "ipfire/ipfire-2.x", "_anchor": "ipfire", "_section": "Defensive Security", "_group": "Firewall Software", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/ipfire/"}, {"name": "OPNsense", "url": "https://github.com/opnsense/core", "description": "Main repository for OPNsense core. See [https://opnsense.org/](https://opnsense.org/) for more details and prebuilt images.", "repo": "opnsense/core", "_anchor": "opnsense", "_section": "Defensive Security", "_group": "Firewall Software", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/opnsense/"}, {"name": "pfSense", "url": "https://github.com/pfsense/pfsense", "description": "Main repository for pfSense. Based on FreeBSD using the pf firewall.", "repo": "pfsense/pfsense", "_anchor": "pfsense", "_section": "Defensive Security", "_group": "Firewall Software", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/pfsense/"}, {"name": "Shorewall", "url": "https://shorewall.org/", "description": "Shorewall is a gateway/firewall configuration tool for GNU/Linux.", "_anchor": "shorewall", "_section": "Defensive Security", "_group": "Firewall Software", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/shorewall/"}, {"name": "Sophos XG", "url": "https://www.sophos.com/en-us/products/free-tools/sophos-xg-firewall-home-edition.aspx", "description": "Features full protection for your home network, including anti-malware, web security and URL filtering, application control, IPS, traffic shaping, VPN, reporting and monitoring, and much more.", "_anchor": "sophos-xg", "_section": "Defensive Security", "_group": "Firewall Software", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/sophos-xg/"}, {"name": "VyOS", "url": "https://github.com/vyos/vyos-build", "description": "Open source router and firewall platform.", "repo": "vyos/vyos-build", "_anchor": "vyos", "_section": "Defensive Security", "_group": "Firewall Software", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/vyos/"}]}, {"title": "Web Application Firewalls (WAF)", "tools": [{"name": "Lua Resty WAF", "url": "https://github.com/p0pr0ck5/lua-resty-waf", "description": "High-performance WAF built on the OpenResty stack.", "repo": "p0pr0ck5/lua-resty-waf", "_anchor": "lua-resty-waf", "_section": "Defensive Security", "_group": "Web Application Firewalls (WAF)", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/lua-resty-waf/"}, {"name": "ModSecurity", "url": "https://github.com/SpiderLabs/ModSecurity", "description": "Open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.", "repo": "SpiderLabs/ModSecurity", "_anchor": "modsecurity", "_section": "Defensive Security", "_group": "Web Application Firewalls (WAF)", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/modsecurity/"}, {"name": "Naxsi", "url": "https://github.com/nbs-system/naxsi", "description": "Open-source, high performance, low rules maintenance WAF for NGINX.", "repo": "nbs-system/naxsi", "_anchor": "naxsi", "_section": "Defensive Security", "_group": "Web Application Firewalls (WAF)", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/naxsi/"}, {"name": "Predator", "url": "https://github.com/s0md3v/Predator", "description": "Anti-Automation System.", "repo": "s0md3v/Predator", "_anchor": "predator", "_section": "Defensive Security", "_group": "Web Application Firewalls (WAF)", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/predator/"}, {"name": "Shadow Daemon", "url": "https://github.com/zecure/shadowd", "description": "The Shadow Daemon web application firewall server.", "repo": "zecure/shadowd", "_anchor": "shadow-daemon", "_section": "Defensive Security", "_group": "Web Application Firewalls (WAF)", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/shadow-daemon/"}, {"name": "Vulture", "url": "https://www.vultureproject.org/", "description": "An open-source WAF.", "_anchor": "vulture", "_section": "Defensive Security", "_group": "Web Application Firewalls (WAF)", "_tabs": ["defensive-security"], "_tab_titles": ["Defensive Security"], "_page": "/tools/vulture/"}]}]}, {"title": "Offensive Security", "groups": [{"title": "", "tools": [{"name": "Awesome WAF - Known Bypasses", "url": "https://github.com/0xInfection/Awesome-WAF#known-bypasses", "description": "Known WAF bypasses.", "repo": "0xInfection/Awesome-WAF", "_anchor": "awesome-waf-known-bypasses", "_section": "Offensive Security", "_group": "", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/awesome-waf-known-bypasses/"}, {"name": "Abuse SSL Bypass", "url": "https://github.com/LandGrey/abuse-ssl-bypass-waf", "description": "Bypassing WAF by abusing SSL/TLS Ciphers.", "repo": "LandGrey/abuse-ssl-bypass-waf", "_anchor": "abuse-ssl-bypass", "_section": "Offensive Security", "_group": "", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/abuse-ssl-bypass/"}, {"name": "FTW", "url": "https://github.com/coreruleset/ftw", "description": "Framework for Testing WAFs (FTW!).", "repo": "coreruleset/ftw", "_anchor": "ftw", "_section": "Offensive Security", "_group": "", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/ftw/"}, {"name": "gotestwaf", "url": "https://github.com/wallarm/gotestwaf", "description": "Test different WAF for detection logic and bypasses.", "repo": "wallarm/gotestwaf", "_anchor": "gotestwaf", "_section": "Offensive Security", "_group": "", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/gotestwaf/"}, {"name": "hakoriginfinder", "url": "https://github.com/hakluke/hakoriginfinder", "description": "Tool for discovering the origin host behind a reverse proxy.", "repo": "hakluke/hakoriginfinder", "_anchor": "hakoriginfinder", "_section": "Offensive Security", "_group": "", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/hakoriginfinder/"}, {"name": "IdentYwaf", "url": "https://github.com/stamparm/identywaf", "description": "Blind WAF identification tool.", "repo": "stamparm/identywaf", "_anchor": "identywaf", "_section": "Offensive Security", "_group": "", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/identywaf/"}, {"name": "Lightbulb Framework", "url": "https://github.com/lightbulb-framework/lightbulb-framework", "description": "Tools for auditing WAFS.", "repo": "lightbulb-framework/lightbulb-framework", "_anchor": "lightbulb-framework", "_section": "Offensive Security", "_group": "", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/lightbulb-framework/"}, {"name": "WAF Bench", "url": "https://github.com/microsoft/wafbench", "description": "Tool to measure the performance of WAF.", "repo": "microsoft/wafbench", "_anchor": "waf-bench", "_section": "Offensive Security", "_group": "", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/waf-bench/"}, {"name": "WAF Bypass", "url": "https://github.com/vincentcox/bypass-firewalls-by-DNS-history", "description": "This script will search for DNS A history records and check if the server replies for that domain.", "repo": "vincentcox/bypass-firewalls-by-DNS-history", "_anchor": "waf-bypass", "_section": "Offensive Security", "_group": "", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/waf-bypass/"}, {"name": "WAF Ninja", "url": "https://github.com/khalilbijjou/wafninja", "description": "Tool which contains two functions to attack Web Application Firewalls.", "repo": "khalilbijjou/wafninja", "_anchor": "waf-ninja", "_section": "Offensive Security", "_group": "", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/waf-ninja/"}, {"name": "WAF Tester", "url": "https://github.com/Raz0r/waftester", "description": "WAF Testing Tool.", "repo": "Raz0r/waftester", "_anchor": "waf-tester", "_section": "Offensive Security", "_group": "", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/waf-tester/"}, {"name": "wafw00f", "url": "https://github.com/EnableSecurity/wafw00f", "description": "Allows one to identify and fingerprint WAF products protecting a website.", "repo": "EnableSecurity/wafw00f", "_anchor": "wafw00f", "_section": "Offensive Security", "_group": "", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/wafw00f/"}, {"name": "WhatWaf", "url": "https://github.com/Ekultek/WhatWaf", "description": "Detect and bypass web application firewalls and protection systems.", "repo": "Ekultek/WhatWaf", "_anchor": "whatwaf", "_section": "Offensive Security", "_group": "", "_tabs": ["offensive-security"], "_tab_titles": ["Offensive Security"], "_page": "/tools/whatwaf/"}]}]}], "tools": [{"name": "Abuse SSL Bypass", "url": "https://github.com/LandGrey/abuse-ssl-bypass-waf", "description": "Bypassing WAF by abusing SSL/TLS Ciphers.", "category": "firewalls", "section": "Offensive Security", "group": "", "repo": "LandGrey/abuse-ssl-bypass-waf", "links": [], "tags": [], "path": "/tools/abuse-ssl-bypass/", "listing": "/firewalls/#abuse-ssl-bypass"}, {"name": "Awesome WAF - Known Bypasses", "url": "https://github.com/0xInfection/Awesome-WAF#known-bypasses", "description": "Known WAF bypasses.", "category": "firewalls", "section": "Offensive Security", "group": "", "repo": "0xInfection/Awesome-WAF", "links": [], "tags": [], "path": "/tools/awesome-waf-known-bypasses/", "listing": "/firewalls/#awesome-waf-known-bypasses"}, {"name": "ClearOS", "url": "https://clearos.com/", "description": "Designed for use in small and medium enterprises as a network gateway.", "category": "firewalls", "section": "Defensive Security", "group": "Firewall Software", "repo": null, "links": [], "tags": [], "path": "/tools/clearos/", "listing": "/firewalls/#clearos"}, {"name": "Endian", "url": "https://sourceforge.net/projects/efw/", "description": "A turn-key linux security distribution that makes your system a full featured security appliance.", "category": "firewalls", "section": "Defensive Security", "group": "Firewall Software", "repo": null, "links": [], "tags": [], "path": "/tools/endian/", "listing": "/firewalls/#endian"}, {"name": "FTW", "url": "https://github.com/coreruleset/ftw", "description": "Framework for Testing WAFs (FTW!).", "category": "firewalls", "section": "Offensive Security", "group": "", "repo": "coreruleset/ftw", "links": [], "tags": [], "path": "/tools/ftw/", "listing": "/firewalls/#ftw"}, {"name": "gotestwaf", "url": "https://github.com/wallarm/gotestwaf", "description": "Test different WAF for detection logic and bypasses.", "category": "firewalls", "section": "Offensive Security", "group": "", "repo": "wallarm/gotestwaf", "links": [], "tags": [], "path": "/tools/gotestwaf/", "listing": "/firewalls/#gotestwaf"}, {"name": "hakoriginfinder", "url": "https://github.com/hakluke/hakoriginfinder", "description": "Tool for discovering the origin host behind a reverse proxy.", "category": "firewalls", "section": "Offensive Security", "group": "", "repo": "hakluke/hakoriginfinder", "links": [], "tags": [], "path": "/tools/hakoriginfinder/", "listing": "/firewalls/#hakoriginfinder"}, {"name": "IdentYwaf", "url": "https://github.com/stamparm/identywaf", "description": "Blind WAF identification tool.", "category": "firewalls", "section": "Offensive Security", "group": "", "repo": "stamparm/identywaf", "links": [], "tags": [], "path": "/tools/identywaf/", "listing": "/firewalls/#identywaf"}, {"name": "ipfire", "url": "https://github.com/ipfire/ipfire-2.x", "description": "The Open Source Firewall.", "category": "firewalls", "section": "Defensive Security", "group": "Firewall Software", "repo": "ipfire/ipfire-2.x", "links": [], "tags": [], "path": "/tools/ipfire/", "listing": "/firewalls/#ipfire"}, {"name": "Lightbulb Framework", "url": "https://github.com/lightbulb-framework/lightbulb-framework", "description": "Tools for auditing WAFS.", "category": "firewalls", "section": "Offensive Security", "group": "", "repo": "lightbulb-framework/lightbulb-framework", "links": [], "tags": [], "path": "/tools/lightbulb-framework/", "listing": "/firewalls/#lightbulb-framework"}, {"name": "Lua Resty WAF", "url": "https://github.com/p0pr0ck5/lua-resty-waf", "description": "High-performance WAF built on the OpenResty stack.", "category": "firewalls", "section": "Defensive Security", "group": "Web Application Firewalls (WAF)", "repo": "p0pr0ck5/lua-resty-waf", "links": [], "tags": [], "path": "/tools/lua-resty-waf/", "listing": "/firewalls/#lua-resty-waf"}, {"name": "ModSecurity", "url": "https://github.com/SpiderLabs/ModSecurity", "description": "Open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.", "category": "firewalls", "section": "Defensive Security", "group": "Web Application Firewalls (WAF)", "repo": "SpiderLabs/ModSecurity", "links": [], "tags": [], "path": "/tools/modsecurity/", "listing": "/firewalls/#modsecurity"}, {"name": "Naxsi", "url": "https://github.com/nbs-system/naxsi", "description": "Open-source, high performance, low rules maintenance WAF for NGINX.", "category": "firewalls", "section": "Defensive Security", "group": "Web Application Firewalls (WAF)", "repo": "nbs-system/naxsi", "links": [], "tags": [], "path": "/tools/naxsi/", "listing": "/firewalls/#naxsi"}, {"name": "Netgate", "url": "https://shop.netgate.com/", "description": "Open-source company that provides high-performance and affordable appliance and software-based firewall, VPN, and routing solutions.", "category": "firewalls", "section": "Defensive Security", "group": "Firewall Hardware", "repo": null, "links": [], "tags": [], "path": "/tools/netgate/", "listing": "/firewalls/#netgate"}, {"name": "OPNsense", "url": "https://github.com/opnsense/core", "description": "Main repository for OPNsense core. See [https://opnsense.org/](https://opnsense.org/) for more details and prebuilt images.", "category": "firewalls", "section": "Defensive Security", "group": "Firewall Software", "repo": "opnsense/core", "links": [], "tags": [], "path": "/tools/opnsense/", "listing": "/firewalls/#opnsense"}, {"name": "pfSense", "url": "https://github.com/pfsense/pfsense", "description": "Main repository for pfSense. Based on FreeBSD using the pf firewall.", "category": "firewalls", "section": "Defensive Security", "group": "Firewall Software", "repo": "pfsense/pfsense", "links": [], "tags": [], "path": "/tools/pfsense/", "listing": "/firewalls/#pfsense"}, {"name": "Predator", "url": "https://github.com/s0md3v/Predator", "description": "Anti-Automation System.", "category": "firewalls", "section": "Defensive Security", "group": "Web Application Firewalls (WAF)", "repo": "s0md3v/Predator", "links": [], "tags": [], "path": "/tools/predator/", "listing": "/firewalls/#predator"}, {"name": "Shadow Daemon", "url": "https://github.com/zecure/shadowd", "description": "The Shadow Daemon web application firewall server.", "category": "firewalls", "section": "Defensive Security", "group": "Web Application Firewalls (WAF)", "repo": "zecure/shadowd", "links": [], "tags": [], "path": "/tools/shadow-daemon/", "listing": "/firewalls/#shadow-daemon"}, {"name": "Shorewall", "url": "https://shorewall.org/", "description": "Shorewall is a gateway/firewall configuration tool for GNU/Linux.", "category": "firewalls", "section": "Defensive Security", "group": "Firewall Software", "repo": null, "links": [], "tags": [], "path": "/tools/shorewall/", "listing": "/firewalls/#shorewall"}, {"name": "Sophos XG", "url": "https://www.sophos.com/en-us/products/free-tools/sophos-xg-firewall-home-edition.aspx", "description": "Features full protection for your home network, including anti-malware, web security and URL filtering, application control, IPS, traffic shaping, VPN, reporting and monitoring, and much more.", "category": "firewalls", "section": "Defensive Security", "group": "Firewall Software", "repo": null, "links": [], "tags": [], "path": "/tools/sophos-xg/", "listing": "/firewalls/#sophos-xg"}, {"name": "UniFi", "url": "https://www.ui.com/", "description": "Full-Stack Networking. Home to Enterprise grade equipment.", "category": "firewalls", "section": "Defensive Security", "group": "Firewall Hardware", "repo": null, "links": [], "tags": [], "path": "/tools/unifi/", "listing": "/firewalls/#unifi"}, {"name": "Untangle", "url": "https://www.untangle.com/untangle-ng-firewall/appliances/", "description": "Network Security Framework provides cloud-managed security and connectivity.", "category": "firewalls", "section": "Defensive Security", "group": "Firewall Hardware", "repo": null, "links": [], "tags": [], "path": "/tools/untangle/", "listing": "/firewalls/#untangle"}, {"name": "Vulture", "url": "https://www.vultureproject.org/", "description": "An open-source WAF.", "category": "firewalls", "section": "Defensive Security", "group": "Web Application Firewalls (WAF)", "repo": null, "links": [], "tags": [], "path": "/tools/vulture/", "listing": "/firewalls/#vulture"}, {"name": "VyOS", "url": "https://github.com/vyos/vyos-build", "description": "Open source router and firewall platform.", "category": "firewalls", "section": "Defensive Security", "group": "Firewall Software", "repo": "vyos/vyos-build", "links": [], "tags": [], "path": "/tools/vyos/", "listing": "/firewalls/#vyos"}, {"name": "WAF Bench", "url": "https://github.com/microsoft/wafbench", "description": "Tool to measure the performance of WAF.", "category": "firewalls", "section": "Offensive Security", "group": "", "repo": "microsoft/wafbench", "links": [], "tags": [], "path": "/tools/waf-bench/", "listing": "/firewalls/#waf-bench"}, {"name": "WAF Bypass", "url": "https://github.com/vincentcox/bypass-firewalls-by-DNS-history", "description": "This script will search for DNS A history records and check if the server replies for that domain.", "category": "firewalls", "section": "Offensive Security", "group": "", "repo": "vincentcox/bypass-firewalls-by-DNS-history", "links": [], "tags": [], "path": "/tools/waf-bypass/", "listing": "/firewalls/#waf-bypass"}, {"name": "WAF Ninja", "url": "https://github.com/khalilbijjou/wafninja", "description": "Tool which contains two functions to attack Web Application Firewalls.", "category": "firewalls", "section": "Offensive Security", "group": "", "repo": "khalilbijjou/wafninja", "links": [], "tags": [], "path": "/tools/waf-ninja/", "listing": "/firewalls/#waf-ninja"}, {"name": "WAF Tester", "url": "https://github.com/Raz0r/waftester", "description": "WAF Testing Tool.", "category": "firewalls", "section": "Offensive Security", "group": "", "repo": "Raz0r/waftester", "links": [], "tags": [], "path": "/tools/waf-tester/", "listing": "/firewalls/#waf-tester"}, {"name": "wafw00f", "url": "https://github.com/EnableSecurity/wafw00f", "description": "Allows one to identify and fingerprint WAF products protecting a website.", "category": "firewalls", "section": "Offensive Security", "group": "", "repo": "EnableSecurity/wafw00f", "links": [], "tags": [], "path": "/tools/wafw00f/", "listing": "/firewalls/#wafw00f"}, {"name": "WhatWaf", "url": "https://github.com/Ekultek/WhatWaf", "description": "Detect and bypass web application firewalls and protection systems.", "category": "firewalls", "section": "Offensive Security", "group": "", "repo": "Ekultek/WhatWaf", "links": [], "tags": [], "path": "/tools/whatwaf/", "listing": "/firewalls/#whatwaf"}]}