๐ฆ ClawHub
waf-validator-skills
by @realguoxiufeng
WAF Rule Validator - Tool for testing and validating WAF security rules
๐ก Examples
Basic scan
./gotestwaf --url=http://localhost:8080 --noEmailReport
gRPC testing
./gotestwaf --url=http://localhost --grpcPort 9000 --noEmailReport
OpenAPI driven testing
./gotestwaf --url=http://api.example.com --openapiFile ./api.yaml --noEmailReport
Docker usage
docker pull wallarm/gotestwaf
docker run --rm --network="host" -v ${PWD}/reports:/app/reports \
wallarm/gotestwaf --url=http://target-url --noEmailReport
๐ Tips & Best Practices
testcases/owasp/ are true-positive (should be blocked)testcases/false-pos/ are true-negative (should pass)reports/ directory by defaultTERMINAL
clawhub install waf-validator-skills