Web Attack Cheat Sheet
翻译 - Web 攻击备忘单
#安全#serve as a reverse proxy to protect your web services from attacks and exploits.
w3af: web application attack and audit framework, the open source web vulnerability scanner.
翻译 - w3af：Web应用程序攻击和审核框架，开源Web漏洞扫描程序。
This solution automatically deploys a single web access control list (web ACL) with a set of AWS WAF rules designed to filter common web-based attacks.
A repository to showcase some of the popular web attacks.
All-in-one solution for high performance web content delivery and advanced protection against DDoS and web attacks
A utility for arming (creating) many bees (micro EC2 instances) to attack (load test) targets (web applications).
翻译 - 用于武装（创建）许多蜜蜂（微型EC2实例）以攻击（负载测试）目标（Web应用程序）的实用程序。
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range o...
翻译 - ModSecurity是Trustwave的SpiderLabs开发的，用于Apache，IIS和Nginx的开源，跨平台Web应用程序防火墙（WAF）引擎。它具有强大的基于事件的编程语言，可提供针对Web应用程序的多种攻击保护，并允许HTTP流量监视，日志记录和实时分析。 ModSecurity在全球范围内有10,000多个部署，是现有部署最广泛的WAF。
Perform timing attacks against web applications
Universal and Transferable Attacks on Aligned Language Models
Azure and AWS Attacks
PyTorch implementation of adversarial attacks [torchattacks]
Framework for Man-In-The-Middle attacks
翻译 - 中间人攻击框架
Detect Evil Maid Attacks
Cleans HTML to avoid XSS attacks
All MITM attacks in one place.
wifi attacks suite
Code to evaluate XLATE attacks as well existing cache attacks.
Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown
Project Wycheproof tests crypto libraries against known attacks.
翻译 - Wycheproof项目针对已知攻击测试加密库。
Python implementations of cryptographic attacks and utilities.