English | 中文文档

A simple and easy to use WAF tool. Built on Chaitin Technology's ace 🤖️Intelligent Semantic Analysis algorithm🤖️, designed for the community.

There is a simple http server, listened on http://127.0.0.1:8889, can be used as for testing.

docker info
docker compose version

# download startup script
git clone [email protected]:chaitin/safeline.git
# or use `wget https://github.com/chaitin/safeline/releases/download/v1.0.2/safeline.zip -O safeline.zip && unzip safeline.zip`

# execute `./safeline-ce.sh` to generate the initial env params. WAF will be installed by default in the `/data/safeline-ce/` directory
cd safeline
./safeline-ce.sh

# launch
sudo docker compose up -d

Open admin page https://<waf-ip>:9443 and scan qrcode with any authenticator Apps that support TOTP, enter the code to login.

💡 TIPS: After creating website，execute curl -H "Host: <Domain>" http://<WAF IP>:<Port> to check if you can get correct response from web server.

• If your website is hosted by DNS, just modify your DNS record to WAF
• If your website is behind any reverse-proxy like nginx, you can modify your nginx conf and set upstream to WAF

Try these:

• http://<IP or Domain>:<Port>/webshell.php
• http://<IP or Domain>:<Port>/?id=1%20AND%201=1
• http://<IP or Domain>:<Port>/?a=<script>alert(1)</script>

1. You can make bug feedback and feature suggestions directly through GitHub Issues.
2. By scanning the QR code below (use wechat or qq), you can join the discussion group of SafeLine users for detailed discussions.

SafeLine has already joined CTStack community.