A lightweight and robust Web Application Firewall (WAF) designed to protect your web applications from common attacks. Developed from scratch in just 24 hours during a Hackathon event.
- SQL Injection detection and prevention
- XSS (Cross-Site Scripting) attack detection
- Simple DoS protection (request rate limiting)
- Attack logging in a local database
- User authentication and session management
- Clean and modern user interface
- Create a Python Virtual Environment
python -m venv venv source venv/bin/activate # On Windows: venv\Scripts\activate
- Install Required Packages
pip install -r requirements.txt
- Start the Server
The server will run by default at http://localhost:5000
python Server.py
- Database:
waf.db
(SQLite) - To view attack logs:
sqlite3 waf.db SELECT * FROM attacks;
├── Server.py # Main server and application logic
├── AttackTest.py # Attack detection and logging
├── SQLi.py # SQL Injection detection
├── XSS.py # XSS detection
├── DOS.py # DoS protection
├── requirements.txt # Python dependencies
├── Templates/ # HTML templates
└── README.md # Project documentation
Contributions and feedback are welcome! Please open an issue or submit a pull request if you have suggestions or improvements.