Waf Python Packages

wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

fray

Open-source WAF Security Testing Platform — 7,200+ attack payloads, 98 WAF/CDN fingerprints, AI-powered bypass engine, recon pipeline, beautiful CLI output

pysigsci

Python module for Signal Sciences

octorules-cloudflare

Cloudflare provider for octorules

octorules

Manage WAF rules across providers as code

django-waf

Self-hosted WAF and bot management middleware for Django: rate limiting, IP/UA/CIDR block rules, HTTP fingerprinting, JS proof-of-work challenges, behavioural anomaly detection, form protection, nginx blocklist generation, and a collective threat feed. Redis-backed, fail-open.

gammarer-aws-waf-geo-restriction-rule-group

This is an AWS CDK Geo Restriction Rule Group on WAF V2

ftw

Framework for Testing WAFs (FTW!)

gammarers-aws-waf-ip-restrict-rule

This is an AWS CDK Construct for IP Restriction Rule Group on WAF V2

fenjing

专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF

gammarers-aws-waf-geo-restrict-rule

This is an AWS CDK Geo Restriction Rule Group on WAF V2

octorules-aws

AWS WAF v2 provider for octorules

octorules-google

Google Cloud Armor provider for octorules

kosty

Scan 30+ AWS services. Find cost waste. Detect security gaps. Map your attack surface. One command.

octorules-bunny

Bunny.net Shield WAF provider for octorules

octorules-azure

Azure WAF provider for octorules

gammarer-aws-waf-ip-restriction-rule-group

This is an AWS CDK Construct for IP Restriction Rule Group on WAF V2

gammarers-aws-waf-geo-restriction-rule-group

This is an AWS CDK Construct for Geo Restriction Rule Group on WAF V2

gammarers-aws-waf-ip-restriction-rule-group

This is an AWS CDK Construct for IP Restriction Rule Group on WAF V2

inferwall

AI application firewall for LLM-powered apps — multi-layered detection (heuristic, ML classifier, semantic, LLM-judge) against prompt injection, jailbreaks, and data leakage - inferwall.com

stingxss

Context-aware reflected & DOM XSS scanner with WAF detection and evasion

llm-thorn

🌵 Runtime semantic security layer for LLM apps — catches jailbreaks, prompt injection & data exfiltration before they reach your model. Fully local. WAF for the AI era.

pywssocks

A SOCKS proxy implementation over WebSocket protocol.

waymap

Waymap is a fast and optimized web vulnerability scanner built for penetration testers. It helps in identifying vulnerabilities by testing against various payloads.