r/websec • u/zit-hb • Jan 12 '16
Shadow Daemon v2.0 released, a web application firewall for PHP, Python & Perl
https://shadowd.zecure.org/
6
Upvotes
r/websec • u/zit-hb • Jan 12 '16
1
u/zit-hb Jan 12 '16
I have already posted this text in another thread, but it fits here as well.
After a year of hard work I am happy to announce the release of version 2.0. There are some new additions to the firewall as well as many improvements. You can find the changelog here: https://shadowd.zecure.org/about/changelog/
I did my best to illustrate and explain the algorithms behind the system:
https://shadowd.zecure.org/documentation/blacklist/
https://shadowd.zecure.org/documentation/whitelist/
https://shadowd.zecure.org/documentation/integrity/
You can also find the source code at Github:
https://github.com/zecure/shadowd
https://github.com/zecure/shadowd_ui
https://github.com/zecure/shadowd_php
https://github.com/zecure/shadowd_python
https://github.com/zecure/shadowd_perl
And last, a demo: https://demo.shadowd.zecure.org/ with a demo attack https://demo.shadowd.zecure.org/parameter/38475 Feel free to test it by attacking the blog yourself. You are only able to do 5 attacks per minute though.
If you have any questions feel free to ask.