WAF2PY 1.0

Hello all.
I'm glad to announce  WAF2PY 1.0 🎉🎉🎊

*What is this?*

WAF2PY is a Web Application Firewall using NGINX and ModSecurity. WAF2PY
provides a nice and easy to use web interface powered by Web2Py that
controls modsecurity and nginx configuration in an easy way, allowing you
to configure protection for any web application in just minutes.


*Features*

   - Protect a site in just minutes
   - Create global or local exclusions for any rule
   - Add virtual interfaces
   - Create static routes for the desired app
   - Analyze debug, access, error and audit logs
   - Download logs
   - Check the stats for every application
   - Disable/Enable protection with just 1 click
   - Enable/Disable rules
   - Modify rules
   - Restrict paths or files
   - Insert headers
   - Start/Stop/Reload/Check Syntax of NGINX
   - CAPTCHA on login (Google Recaptcha2)
   - Two-step Login Authentication (Email code)
   - Written on Python3


*Images*

https://photos.app.goo.gl/kXrsQTPPMuAXi8Tr5

*Download*

You can download WAF2PY from github: https://github.com/ITSec-Chile/Waf2Py

*About this bundle*

Tested in Debian 10 (No docker).

*Components for this build:*

   - Waf2Py 1.0 App
   - Web2Py 2.20.2
   - Nginx version: openresty 1.17.6.2
   - ModSecurity v3 - libmodsecurity3
   - Modsecurity Nginx connector OWASP ModSecurity Core Rule Set (CRS) 3.3


Cheers.
Chris.

_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/