Raptor WAF

Raptor is a Web application firewall made in C that uses DFA to block SQL injection, Cross-site scripting, and path traversal. https://funguscodes.blogspot.com/2016/08/steps-to-create-your-wafweb-application.html

Video demo:

https://www.youtube.com/watch?v=VtL0apDv1N4&t=163s

Compile and run

to compile and run, follow this commands:

$ git clone https://github.com/CoolerVoid/raptor_waf

$ cd raptor_waf; make; bin/raptor

#Note: Don't execute with "cd bin; ./raptor" use full path "bin/raptor" look detail https://github.com/CoolerVoid/raptor_waf/issues/4

Needs lib pcre to compile.

Example

Up some HTTPd server at port 80 redirect with raptor to port 8883

$ bin/Raptor -h localhost -p 80 -r 8883 -w 4 -o loglog.txt

Copy vulnerable PHP code to your webserver directory

$ cp doc/test_dfa/test.php /var/www/html

Now you can test XSS attacks at http://localhost:8883/test.php

Other option is to execute command(now with regex, look file config/regex_rules.txt to edit rules):

$ bin/Raptor -h 127.0.0.1 -p 80 -r 8883 -w 0 -o resultwaf -m pcre

Check sec test

Look at the docs

https://github.com/CoolerVoid/raptor_waf/blob/master/doc/raptor.pdf

Please look at this other WAF, if you need more performance and no race conditions https://github.com/CoolerVoid/OctopusWAF