Awesome GitHub RepositoriesHTTP Request Filtering

This project is a PHP e-commerce platform and enterprise storefront framework designed for building and managing online stores. It functions as a modular PHP application and headless commerce engine, separating e-commerce business logic from frontend presentation to support multiple storefronts and devices. The system is built on a modular architecture that allows developers to add custom business logic and third-party integrations. It utilizes a service-contract-based API to ensure stability across module implementations and employs dependency-injection for object lifecycle management. Core

jwt-auth is a PHP package providing JSON Web Token authentication for Laravel and Lumen applications. It serves as a token provider and stateless session manager, allowing applications to issue and validate signed tokens to manage user identity across network requests. The library implements stateless API security by verifying identity tokens sent in request headers, removing the requirement to store session data on the server. It uses signed tokens to verify user credentials and restrict access to protected resources. The project provides capabilities for user access control, authentication

Bunkerized Nginx is a containerized security automation system that provides a secure reverse proxy and web application firewall. It focuses on protecting web applications by monitoring container labels within cloud-native orchestration systems to automatically update security settings and firewall rules. The system distinguishes itself through automated security operations, including the automatic management of SSL certificates and an automated client banning mechanism that blocks IP addresses based on HTTP status codes. It features bot challenge mechanisms using CAPTCHAs, JavaScript, or coo

BunkerWeb is a containerized suite of infrastructure tools that functions as a cloud-native web application firewall and Nginx reverse proxy. It provides a security layer for web applications, combining traffic routing with automated SSL certificate management and a web-based security dashboard for monitoring and configuration. The project distinguishes itself through its deep integration with container orchestrators, serving as a Kubernetes ingress controller that automates security settings and service discovery via container labels. It features a plugin-based extension model and a manageme

Grape is a RESTful web service framework for Ruby designed for building structured APIs. It provides a declarative syntax for routing and parameter validation, allowing developers to map HTTP verbs to logic through a domain specific language. The framework is distinguished by its built-in support for service versioning, which can be managed via URL paths, custom headers, or request parameters. It also features a modular architecture that allows large services to be constructed by nesting smaller API definitions. The project covers comprehensive API lifecycle capabilities, including schema-dr

Spark is a lightweight Java web framework and embedded server designed for building web applications with minimal boilerplate. It functions as an HTTP routing engine that maps URL paths and methods to handler functions, providing a specialized domain specific language for web development in Kotlin. The framework enables the implementation of REST APIs and web services through the definition of HTTP routes. It supports the extraction of dynamic path parameters and the transformation of response data into formats such as JSON. Additional capabilities include the ability to serve static files a

ModSecurity is an open-source web application firewall and security engine. It functions as an HTTP traffic inspector and intrusion detection system that filters incoming web requests and responses against a set of security rules to block threats and prevent attacks on web servers. The project provides a modular framework for implementing restrictive security policies and custom filtering logic. It identifies and blocks common injection attacks, such as cross-site scripting and SQL injection, while hardening web applications to reduce their overall attack surface. Its broader capabilities in

This project is a Node.js HTTP proxy server that enables cross-domain API requests from browsers by injecting Cross-Origin Resource Sharing headers into HTTP responses. It functions as a reverse proxy gateway and header manipulator, allowing for the interception and modification of traffic between a client and a target server. The proxy provides mechanisms to bypass browser same-origin policy restrictions through automated header injection. It includes capabilities for origin-based rate limiting and request interception to control traffic flow and prevent unauthorized usage of the proxy servi

uBlock is a browser content blocker and web privacy tool designed to prevent advertisements and tracking scripts from loading. It functions as a network request filter, a DOM element hider, and a script execution controller to manage how web pages load and render. The project distinguishes itself through a combination of network-level request interception and cosmetic filtering. It uses declarative filter lists and pattern-based matching to block trackers and pop-ups, while employing CSS selectors and wildcard entity matching to remove visual components across multiple regional domain variant

Higress is an AI API gateway and cloud-native traffic manager that functions as a Kubernetes ingress controller. It provides a centralized system for routing, securing, and optimizing traffic directed toward large language models, AI agents, and microservice architectures. The project distinguishes itself through deep AI orchestration, including the ability to host and manage Model Context Protocol servers that transform REST APIs into tools for AI agents. It features specialized AI infrastructure for model request proxying, protocol translation across multiple providers, and semantic-based c

Proxyman is a cross-platform HTTP debugging proxy that captures, inspects, and modifies HTTP, HTTPS, and WebSocket traffic. It functions as a man-in-the-middle proxy, decrypting SSL/TLS traffic to allow real-time inspection and modification of encrypted requests and responses. The tool is designed for debugging web and mobile applications, with capabilities for API mocking and simulation, scriptable traffic modification, and team collaboration on network logs. What distinguishes Proxyman is its deep integration with mobile and cross-platform development workflows. It provides automated certif

RuoYi-Vue3 is a full-stack administrative dashboard and permission management framework built with SpringBoot and Vue 3. It serves as an enterprise management backend providing a decoupled architecture that separates the API from the user interface. The project features a low-code CRUD generator that automatically produces frontend and backend boilerplate code and API documentation from database tables. It implements a comprehensive role-based access control system for managing users, departments, and granular permissions at the menu and button levels, secured by stateless JSON Web Token auth

laravel-cors is a middleware package for Laravel applications that manages Cross-Origin Resource Sharing. It functions as an HTTP security layer that validates request origins and injects the necessary headers into application responses to control how external domains access a backend API. The project provides a configuration-driven policy engine to match incoming request origins and methods against allowed values. This includes support for wildcard origin matching to authorize multiple trusted domains through a single rule and the automatic handling of pre-flight OPTIONS requests. The syste

VCR is a Ruby library that records and replays HTTP interactions during test runs, storing them in serialized cassette files. It captures real HTTP requests and responses, then serves those recorded responses instead of making actual network calls, enabling fast and deterministic test suites that work offline. The library provides configurable request matching, allowing comparisons based on method, URI, host, path, body, or headers to find the correct recorded response. It supports scheduled cassette re-recording to automatically refresh stored interactions at a configurable interval, keeping

CodeIgniter is a PHP web framework built on the Model-View-Controller pattern, designed for building full-stack web applications. It provides a lightweight toolkit with minimal configuration, organizing application logic into controllers, models, and views for clean separation of concerns. The framework includes a fluent query builder for constructing SQL statements programmatically, PSR-4 autoloading with namespace mapping, and a service-based dependency injection container for managing shared class instances. The framework distinguishes itself through its comprehensive set of built-in tools

Helicone is an AI gateway and observability platform designed to intercept, manage, and monitor interactions with large language models. By acting as a reverse-proxy, it provides a centralized layer for routing requests across multiple AI providers, allowing developers to maintain consistent application logic while gaining deep visibility into model performance, usage, and costs. The platform distinguishes itself through a robust suite of traffic management and prompt engineering tools. It enables policy-driven control, including automatic failover between providers, rate limiting, and edge-b

هذا المشروع عبارة عن إطار عمل للتكامل يقوم بتمهيد (bootstrapping) خدمات استدعاء الإجراءات عن بُعد (RPC) الخاصة بـ Apache Dubbo داخل تطبيقات Spring Boot. يعمل كإطار عمل لاتصالات الخدمات المصغرة (microservices) يتيح تنفيذ خدمات RPC، واكتشاف الخدمات، والحوكمة الموزعة من خلال التهيئة المؤتمتة. يتميز المشروع بتوفير جسر RPC متعدد اللغات، مما يسمح للخدمات المكتوبة بلغات مختلفة بالتواصل عبر معايير مثل gRPC و Protobuf. كما يتيح عرض الخدمات المصغرة الخلفية كنقاط نهاية REST باستخدام بروتوكول Triple للوصول المباشر من متصفحات الويب وعملاء الطرف الثالث. يغطي إطار العمل مجموعة واسعة من القدرات، بما في ذلك حوكمة الخدمات الموزعة لتوجيه حركة المرور وتحديد المعدل، وإدارة التهيئة المركزية، وقابلية مراقبة الخدمات المصغرة لتتبع الطلبات ومراقبة الحالة. كما يدعم طبقات نقل متنوعة وتكاملات تخزين لـ Redis و Memcached. يوفر المشروع أدوات بدء (starters) وتهيئات لأتمتة تمهيد بنية RPC التحتية داخل بيئة Spring Boot.

GreenTunnel هي أداة شبكة مصممة للالتفاف على فحص الحزم العميق (DPI) وتجاوز رقابة الإنترنت. تعمل كأداة تعدل حزم الشبكة الصادرة وتُشفّر عمليات بحث DNS لمنع مزودي خدمة الإنترنت وأنظمة تصفية الشبكة من اكتشاف وحظر وجهات ويب معينة. يطبق المشروع وكيل تجزئة HTTP ومجزئ مصافحة HTTPS. تقوم هذه المكونات بتقسيم ترويسات الطلبات وسجلات مصافحة TLS عبر مقاطع متعددة لإخفاء أسماء المضيفين وأسماء خوادم الوجهة عن أنظمة الفحص. تتضمن البرمجيات أيضاً عميل DNS-over-HTTPS لاسترداد عناوين IP باستخدام بروتوكولات مشفرة، مما يمنع اعتراض أو انتحال عمليات بحث DNS القياسية. تغطي القدرات الإضافية معالجة حزم TCP وتجزئة المقاطع في طبقة النقل للتهرب من فحص حركة المرور.

Naxsi هو جدار حماية لتطبيقات الويب لخوادم NGINX مصمم لحماية تطبيقات الويب من الهجمات عن طريق فحص حركة مرور HTTP بحثاً عن أنماط ضارة وتوقيعات الثغرات الأمنية. يعمل كفلتر لتوقيعات الثغرات يطابق الطلبات الواردة مع علامات معروفة للتهديدات مثل حقن SQL (SQL Injection) والبرمجة عبر المواقع (XSS). يتضمن النظام نظام تعلم وأداة تلقائية لإنشاء القواعد لتقليل النتائج الإيجابية الكاذبة. ويقوم بتحليل سلوك الموقع بمرور الوقت لإنشاء قوائم بيضاء لحركة المرور واستثناءات أمنية لأنماط حركة المرور المشروعة. يوفر المشروع محلل أحداث أمنية يستورد سجلات الأمان إلى قاعدة بيانات لإجراء تحليل الاتجاهات. وهذا يسمح بتحديد المضيفين المخالفين وحساب نسب الأحداث من خلال ملخصات تعتمد على قاعدة البيانات.

SpoofDPI هو تطبيق شبكة وخادم وكيل محلي مصمم كأداة لمكافحة الرقابة. يعمل كوكيل للالتفاف على فحص الحزم العميق (DPI) يقوم بتجزئة وتعديل طلبات HTTP الصادرة للتهرب من مرشحات الشبكة والرقابة. يحقق المشروع ذلك من خلال تنفيذ تجزئة طلبات HTTP، وتقسيم الطلبات الفردية إلى حزم أصغر متعددة لإرباك جدران الحماية. كما يقوم بمعالجة تدفق TCP وتعتيم حركة مرور الشبكة لإخفاء طبيعة طلبات الويب وتجاوز حظر المحتوى الإقليمي. يتضمن النظام قدرات لإعادة توجيه الشبكة الشفافة وإدارة التكوين القائمة على الملفات لتنسيق كيفية التعامل مع حركة مرور الشبكة.