presleyhank / web_app_firewall Goto Github PK

#Web App Firewall ##Introduction WAFs goal is protect sites against hackers and virus attacks. Web App Firewall its PHP application that implement principle of reverse-proxy , control of types variables accepted by server , and comfortable management interface.

W.A.F. supported to work under LAMP servers with .htaccess files support. Security protection based on white-list strategy: after starting "Learn" mode program collect map of requests, and user have to approve requests. After starting "Guard" mode - program accept only known requests.

Program using white-list strategy, it is more absolute protection, but its requires a lot of work on configuration. In the program using Intellectual graphical UI , its give an opportunity regularize most chaotic structure.

Contains libraries:

Jquery-connections https://github.com/musclesoft/jquery-connections
jQuery-1.11.3 https://jquery.com
Google Charts https://developers.google.com/chart/

Requires:

Linux OS, Apache webserver with support htaccess and mod_rewrite,PHP5 with support CURL and MySQL

##How its working? Web App Firewall organize reverse-proxy by injection to .htaccess file, and writing Rewrite Rules with security key 1.

WAF script get redirected request and parse path and parameters sent from user. Detect created rules for specified situation and block or accept request via prepared politics.

If request approved, WAF script sending request back to server via CURL with added security key 2 (.htaccess rule miss request if detect key2). If request blocked, WAF save logs and show 404 page. ##Getting Started ###Installation ###HTACCESS Injection ###Configuration Settings Set W.A.F Status Learn on, and Guard off. Now program start collect request-map from every request to site, leave it for one week for view more complete structure of site. ###Access Map - configuration permissions ###Bad Requests log ###Blacklist IP ###Analizing Attacks

Support

Project Facebook
Write me for help [email protected]
Please donate: