Search Results for "modsecurity-iis"
Sort By:
Showing 177 open source projects for "modsecurity-iis"
View related business solutions-
AI-Powered Identity GovernanceDefine governance policies, manage access, and optimize licenses with unified visibility across every identity, app, and file.
-
Employees get more done with RipplingEffortlessly manage the entire employee lifecycle, from hiring to benefits administration. Automate HR tasks, ensure compliance, and streamline approvals. Simplify IT with device management, software access, and compliance monitoring, all from one dashboard. Enjoy timely payroll, real-time financial visibility, and dynamic spend policies. Rippling empowers your business to save time, reduce costs, and enhance efficiency, allowing you to focus on growth. Experience the power of unified management with Rippling today.
-
1
ModSecurity
Cross platform web application firewall (WAF) engine for Apache
ModSecurity is an open-source, cross-platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language that provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. -
2
ModSecurity Nginx Connector
ModSecurity v3 Nginx Connector
ModSecurity-nginx is the connector that embeds the ModSecurity v3 (libmodsecurity) web application firewall engine into NGINX. It integrates WAF processing into the NGINX request/response phases, allowing rules to inspect headers, bodies, and even streaming request data before it reaches upstream apps. Operators can load the OWASP Core Rule Set or custom rules to detect and block common attacks such as SQLi, XSS, RCE patterns, and protocol anomalies. -
3
Coraza
OWASP Coraza WAF is a golang modsecurity compatible firewall library
Coraza is an open-source, enterprise-grade, high-performance Web Application Firewall (WAF) ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set. Coraza is a drop-in alternative to replace the soon-to-be abandoned Trustwave ModSecurity Engine and supports industry-standard SecLang rule sets. Coraza runs the OWASP Core Rule Set (CRS) to protect your web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts. ... -
4
ngx_waf
Handy, High performance, ModSecurity compatible Nginx firewall module
...The IP detection is a constant-time operation. Most of the remaining inspections use caching to improve performance. Compatible with ModSecurity's rules, you can use OWASP ModSecurity Core Rule Set. Supports verifying Google, Bing, Baidu and Yandex crawlers and allowing them automatically to avoid false positives. Supports three kinds of captchas: hCaptcha, reCAPTCHAv2 and reCAPTCHAv3. -
Managed File Transfer SoftwareFor too many businesses, complex file transfer needs make it difficult to create, manage and support data flows to and from internal and external systems. Progress® MOVEit® empowers enterprises to take control of their file transfer workflows with solutions that help secure, simplify and centralize data exchanges throughout the organization.
-
5
Windows ACME Simple (WACS)
A simple ACME client for Windows (for use with Let's Encrypt et al.)
...Store your certificates where and how you want them: Windows, IIS Central Store, .pem files, .pfx file or KeyVault. Compatible with all popular ACME services, including Let’s Encrypt, ZeroSSL, DigiCert, Sectigo, Buypass, Keyon and others. Completely unattended operation from the command line. -
6
LibreSpeed
Self-hosted Speedtest for HTML5 and more
...All modern browsers are supported: IE11, latest Edge, latest Chrome, latest Firefox, latest Safari. Works with mobile versions too. Requires a reasonably fast web server with Apache 2 (nginx, IIS also supported) PHP 5.4 (other backends also available) MySQL database to store test results (optional, PostgreSQL and SQLite also supported) A fast! internet connection. -
7
Radzen Blazor Components
The home of the Radzen Blazor components
...Scaffolding complete CRUD applications from a database. Built-in security, authentication and authorization. Visual Studio Code and Professional support. Deployment to IIS and Azure. Dedicated support with 24 hour guaranteed response time. -
8
AutomatedLab
Framework that lets you deploy complex labs on HyperV and Azure
AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2019, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc. AutomatedLab (AL) enables you to setup test and lab environments on Hyper-v or Azure with multiple products or just a single VM in a very short time. There are only two requirements you need to make sure: You need the DVD ISO images and a Hyper-V host or an Azure subscription. Requires Windows Management Framework 5+ (Windows). ... -
9
tengine-rpm
Tengine RPM for almalinux,a dist of Nginx with some advanced features.
...In short, Tengine is a distribution of Nginx with some advanced features.Tengine does not provide official RPM packages, here to provide unofficial optimized compilation and integration of LuaJIT, ModSecurity, geoip2, and other commonly used modules of the Tengine RPM packages, to facilitate the user to quickly install and configure the web server on the target server. This is a rpm package based on the official package https://tengine.taobao.org/download/tengine-3.1.0.tar.gz, which you can install it for free. The almalinux 9.5-based rpm package can also be used for Red Hat Enterprise Linux (RHEL) and its derivatives, such as CentOS Linux and Rocky Linux. -
JS7 JobScheduler is an open source workload automation solution.JS7 JobScheduler is an open source workload automation solution. It is used to run executable files, shell scripts etc. and database procedures.
-
10
WWebserver with PHP
A simple Windows Webserver for PHP and CGI Scripts
WWebserver is not Apache and was developed from the scratch! The Windows Webserver was developed for testing PHP and CGI/FCGI programs under Windows, without installing an Apache or IIS environment. The Webserver is easy to install and comes with buildin PHP, FastCGI support, mod_rewrite and SSL/TLS 1.2. Also FTP(S), WebDAV and DNS is integrated. It was tested with common OpenSource applications. Buildin PHP 8 versions are chargeable with price of with 10$ under https://www.mwiede.de/windows-php-webserver/ -
11
GM Online Registration
Web Online Registration and Payment System for Events
...Requirements: PayPal Seller account linked to a bank account Web Server with PHP scripting (version 5, 7, or 8) and MySQL database NOTE: This system has only been tested with a web host running a Unix/Linux operating system with the Apache or Lightspeed web server. It has NOT been tested with a web host running the Windows operating system with the IIS web server. Contact the developer if you are using a Windows server and have problems with the system. -
12
gSOAP Toolkit
Development toolkit for Web Services and XML data bindings for C & C++
...Serializes native application data in XML. Includes WSDL/XSD schema binding and auto-coding tools, stub/skeleton compiler, Web server integration with Apache module and IIS extension, high-performance XML processing with schema validation, fast MIME/MTOM streaming, SOAP and REST Web API development, WS-* protocols (WS-Security, WS-Policy, WS-ReliableMessaging, etc), XML-RPC and JSON. Licensed under GPLv2. Visit the developer center with guides, tutorials, and examples at www.genivia.com/dev.html The documentation of the toolkit, libraries, plugins and more is available at www.genivia.com/docs.html Commercial-use licenses and expert technical support services are available at competitive pricing levels, please visit www.genivia.com/products.html -
13
PrimeWeb Windows Control Panel
A windows server control panel for web hosting companies
PrimeWeb is a web-based hosting management system designed to run on Windows servers, providing an intuitive interface for managing websites, domains, databases, emails, virtual machines and server resources. Built with performance and security in mind, it allows administrators and users to efficiently deploy and maintain web hosting environments with minimal technical effort. -
14
xxm
A non-IDE, compile-on-refresh, web platform for Delphi.
xxm is a web platform for Delphi. Combine Delphi and HTML into a compiled library loadable by an ISAPI extension, a stand-alone HTTP service, an Internet Explorer snap-in, a FireFox module, an Apache module, oldskool CGI... -
15
FlubuCore
A cross platform build and deployment automation system
...Large number of often used built-in tasks like e.g. versioning, running tests, creating deployment packages, publishing NuGet packages, docker tasks, git tasts, sql tasks, npm tasks, executing PowerShell, managing IIS scripts and many more. -
16
Pachno
Pachno is an open source platform for collaboration
Pachno is an open‑source collaboration platform—formerly The Bug Genie—offering issue tracking, documentation, PM tools, and code hosting in a unified PHP/JS web solution. It supports installation on Apache/nginx servers and aims to modernize team workflows. -
17
Materialized CMS
A Content Management System for IIS using Materialize CSS Framework.
Materialized CMS is a Content Management System using Materialize CSS. We design and designed it for ourself because we like to develop and learn new stuff. We also decided to share our work to the World, maybe someone have use of it. For now it is in an Early Access Phase and you should have some experince hosting websites if you want to use this Software. However, it is free to use for everyone and it will get updates from time to time. -
18
SharPyShell
Tiny and obfuscated ASP.NET webshell for C# web applications
...The main aim of this framework is to provide the penetration tester with a series of tools to ease the post-exploitation phase once exploitation has been successful against an IIS webserver. This tool is not intended as a replacement for the frameworks for C2 Server (i.e. Meterpreter, Empire, etc..) but this should be used when you land on a fully restricted server where inbound and outbound connections are very limited. In this framework, you will have all the tools needed to privesc, net discovery, and lateral movement as you are typing behind the cmd of the target server. -
19
Atricore’s JOSSO is an open source and commercially supported Internet Single Sign-On (FSSO) solution for point-and-click and standards-based (SAML2) Internet-scale SSO implementations. For more information contact us at : http://www.josso.org
-
20
BaGet
A lightweight NuGet and symbol server
...You can run BaGet on your preferred platform, on your computer, Docker, Azure, AWS, Google Cloud, and Alibaba Cloud (Aliyun). With a few extra steps, you can run BaGet behind a Windows IIS proxy. This has many benefits, including automatic restarts on reboots. You may need to give special permissions to the top-level BaGet folder so that the app can persist in its state. This is necessary as the Application Pools' identity is a virtual account that isn't recognized by the Windows User Management Console. -
21
OpenWAF
Web security protection system based on openresty
...The rule engine mainly analyzes the individual requests, and the behavior analysis engine is mainly responsible for the tracking of the request information. Rule engine inspired by modsecurity and freewaf(lua-resty-waf), the ModSecurity rules will be implemented using lua. The rule engine can be based on the protocol specification, automatic tools, injection attacks, cross site attacks, information leaks and other security exception request, adding support for dynamic rules, timely repair vulnerabilities. -
22
yBlog Creator
Fast, Simple Full-Featured Blog Creator in PHP. No database needed.
Designed from the ground up to take advantage of the new and increasingly standardized features of HTML5 and PHP7+, Yofiel's file-based yBlog Creator provides W3C-validated, responsive, animated page templates that work consistently on Chrome, Safari, and Edge desktops and mobiles. But its fast CSS3 and native JavaScript libraries total less than 15KB. Any HTML editor may create content. Menus and metadata are automatic. A single stylesheet provides multiple color and appearance options... -
23
WTERP
Factional modular: CRM, SD,MM,WM,HR, Workflo and System configuration.
WTERP is totally free software and It is very suitable for small business management. Which is developed by C#/.net. IIS WebService and SQL Server Community version of the free environment and Database at WinForm-based application framework, including server Web Service, main program framework, organizational structure, authority control, menu navigation, basic data, system parameters, log management, timing tasks, etc.WTERP includes enterprise CRM, SD, MM, WM, OA, HR, Workflow, and other information systems, and aims to help users enhance their management. -
24
sWAF
A simple Web Application Firewall docker image
sWAF is a simple Web Application Firewall docker image, pre-configured to be easily used within your web services architecture. It runs NGINX as a dedicated reverse proxy embedding powerful WAF engines: ModSecurity 3, using OWASP® ModSecurity Core Rule Set (CRS) rules, and NAXSI. It uses acme.sh for Let's Encrypt and other free CA support. A lot of people are self-hosting their own cloud infrastructure (using Nextcloud, Synology, QNAP, a cloud lease server or home-made solutions...), but we can never be too much paranoid about web security for a lot of good reasons. ... -
25
Fire Detector
Detect web framework and javascript libraries run on browsing website
When you surf the internet with Fire Detector, You can also find more unknown frameworks and libraries. It is based on [LibrarySniffer](https://github.com/justjavac/ChromeSnifferPlus/). I've replaced some deprecated javascript interfaces with asynchronous ones adopted by Firefox for its add-ons --- ### Limitations - WebExtension only works on sites that allow content scripts. With this WebExtension, You can detect:
