Awesome GitHub RepositoriesHTTP Request Filtering

This project is a PHP e-commerce platform and enterprise storefront framework designed for building and managing online stores. It functions as a modular PHP application and headless commerce engine, separating e-commerce business logic from frontend presentation to support multiple storefronts and devices. The system is built on a modular architecture that allows developers to add custom business logic and third-party integrations. It utilizes a service-contract-based API to ensure stability across module implementations and employs dependency-injection for object lifecycle management. Core

jwt-auth is a PHP package providing JSON Web Token authentication for Laravel and Lumen applications. It serves as a token provider and stateless session manager, allowing applications to issue and validate signed tokens to manage user identity across network requests. The library implements stateless API security by verifying identity tokens sent in request headers, removing the requirement to store session data on the server. It uses signed tokens to verify user credentials and restrict access to protected resources. The project provides capabilities for user access control, authentication

BunkerWeb is a containerized suite of infrastructure tools that functions as a cloud-native web application firewall and Nginx reverse proxy. It provides a security layer for web applications, combining traffic routing with automated SSL certificate management and a web-based security dashboard for monitoring and configuration. The project distinguishes itself through its deep integration with container orchestrators, serving as a Kubernetes ingress controller that automates security settings and service discovery via container labels. It features a plugin-based extension model and a manageme

Bunkerized Nginx is a containerized security automation system that provides a secure reverse proxy and web application firewall. It focuses on protecting web applications by monitoring container labels within cloud-native orchestration systems to automatically update security settings and firewall rules. The system distinguishes itself through automated security operations, including the automatic management of SSL certificates and an automated client banning mechanism that blocks IP addresses based on HTTP status codes. It features bot challenge mechanisms using CAPTCHAs, JavaScript, or coo

Grape is a RESTful web service framework for Ruby designed for building structured APIs. It provides a declarative syntax for routing and parameter validation, allowing developers to map HTTP verbs to logic through a domain specific language. The framework is distinguished by its built-in support for service versioning, which can be managed via URL paths, custom headers, or request parameters. It also features a modular architecture that allows large services to be constructed by nesting smaller API definitions. The project covers comprehensive API lifecycle capabilities, including schema-dr

Spark is a lightweight Java web framework and embedded server designed for building web applications with minimal boilerplate. It functions as an HTTP routing engine that maps URL paths and methods to handler functions, providing a specialized domain specific language for web development in Kotlin. The framework enables the implementation of REST APIs and web services through the definition of HTTP routes. It supports the extraction of dynamic path parameters and the transformation of response data into formats such as JSON. Additional capabilities include the ability to serve static files a

ModSecurity is an open-source web application firewall and security engine. It functions as an HTTP traffic inspector and intrusion detection system that filters incoming web requests and responses against a set of security rules to block threats and prevent attacks on web servers. The project provides a modular framework for implementing restrictive security policies and custom filtering logic. It identifies and blocks common injection attacks, such as cross-site scripting and SQL injection, while hardening web applications to reduce their overall attack surface. Its broader capabilities in

This project is a Node.js HTTP proxy server that enables cross-domain API requests from browsers by injecting Cross-Origin Resource Sharing headers into HTTP responses. It functions as a reverse proxy gateway and header manipulator, allowing for the interception and modification of traffic between a client and a target server. The proxy provides mechanisms to bypass browser same-origin policy restrictions through automated header injection. It includes capabilities for origin-based rate limiting and request interception to control traffic flow and prevent unauthorized usage of the proxy servi

uBlock is a browser content blocker and web privacy tool designed to prevent advertisements and tracking scripts from loading. It functions as a network request filter, a DOM element hider, and a script execution controller to manage how web pages load and render. The project distinguishes itself through a combination of network-level request interception and cosmetic filtering. It uses declarative filter lists and pattern-based matching to block trackers and pop-ups, while employing CSS selectors and wildcard entity matching to remove visual components across multiple regional domain variant

Higress is an AI API gateway and cloud-native traffic manager that functions as a Kubernetes ingress controller. It provides a centralized system for routing, securing, and optimizing traffic directed toward large language models, AI agents, and microservice architectures. The project distinguishes itself through deep AI orchestration, including the ability to host and manage Model Context Protocol servers that transform REST APIs into tools for AI agents. It features specialized AI infrastructure for model request proxying, protocol translation across multiple providers, and semantic-based c

Proxyman is a cross-platform HTTP debugging proxy that captures, inspects, and modifies HTTP, HTTPS, and WebSocket traffic. It functions as a man-in-the-middle proxy, decrypting SSL/TLS traffic to allow real-time inspection and modification of encrypted requests and responses. The tool is designed for debugging web and mobile applications, with capabilities for API mocking and simulation, scriptable traffic modification, and team collaboration on network logs. What distinguishes Proxyman is its deep integration with mobile and cross-platform development workflows. It provides automated certif

RuoYi-Vue3 is a full-stack administrative dashboard and permission management framework built with SpringBoot and Vue 3. It serves as an enterprise management backend providing a decoupled architecture that separates the API from the user interface. The project features a low-code CRUD generator that automatically produces frontend and backend boilerplate code and API documentation from database tables. It implements a comprehensive role-based access control system for managing users, departments, and granular permissions at the menu and button levels, secured by stateless JSON Web Token auth

laravel-cors is a middleware package for Laravel applications that manages Cross-Origin Resource Sharing. It functions as an HTTP security layer that validates request origins and injects the necessary headers into application responses to control how external domains access a backend API. The project provides a configuration-driven policy engine to match incoming request origins and methods against allowed values. This includes support for wildcard origin matching to authorize multiple trusted domains through a single rule and the automatic handling of pre-flight OPTIONS requests. The syste

VCR is a Ruby library that records and replays HTTP interactions during test runs, storing them in serialized cassette files. It captures real HTTP requests and responses, then serves those recorded responses instead of making actual network calls, enabling fast and deterministic test suites that work offline. The library provides configurable request matching, allowing comparisons based on method, URI, host, path, body, or headers to find the correct recorded response. It supports scheduled cassette re-recording to automatically refresh stored interactions at a configurable interval, keeping

CodeIgniter is a PHP web framework built on the Model-View-Controller pattern, designed for building full-stack web applications. It provides a lightweight toolkit with minimal configuration, organizing application logic into controllers, models, and views for clean separation of concerns. The framework includes a fluent query builder for constructing SQL statements programmatically, PSR-4 autoloading with namespace mapping, and a service-based dependency injection container for managing shared class instances. The framework distinguishes itself through its comprehensive set of built-in tools

Helicone is an AI gateway and observability platform designed to intercept, manage, and monitor interactions with large language models. By acting as a reverse-proxy, it provides a centralized layer for routing requests across multiple AI providers, allowing developers to maintain consistent application logic while gaining deep visibility into model performance, usage, and costs. The platform distinguishes itself through a robust suite of traffic management and prompt engineering tools. It enables policy-driven control, including automatic failover between providers, rate limiting, and edge-b

Dieses Projekt ist ein Integrations-Framework, das Apache Dubbo Remote Procedure Call (RPC) Dienste innerhalb von Spring Boot Anwendungen bootet. Es dient als Microservice-Kommunikations-Framework, das die Implementierung von RPC-Diensten, Service-Discovery und verteilter Governance durch automatisierte Konfiguration ermöglicht. Das Projekt zeichnet sich durch eine sprachübergreifende RPC-Brücke aus, die es Diensten in verschiedenen Sprachen ermöglicht, über Standards wie gRPC und Protobuf zu kommunizieren. Zudem ermöglicht es die Bereitstellung von Backend-Microservices als REST-Endpunkte unter Verwendung des Triple-Protokolls für den direkten Zugriff aus Webbrowsern und Drittanbieter-Clients. Das Framework deckt ein breites Spektrum an Funktionen ab, einschließlich verteilter Service-Governance für Traffic-Routing und Rate-Limiting, zentralisiertem Konfigurationsmanagement und Microservice-Observability für Request-Tracing und Health-Monitoring. Es unterstützt zudem diverse Transport-Layer und Speicherintegrationen für Redis und Memcached. Das Projekt bietet Starter und Konfigurationen zur Automatisierung des Bootstrappings der RPC-Infrastruktur innerhalb der Spring Boot Umgebung.

GreenTunnel is a network utility designed to circumvent deep packet inspection and bypass internet censorship. It functions as a tool that modifies outgoing network packets and encrypts DNS lookups to prevent internet service providers and network filtering systems from detecting and blocking specific web destinations. The project implements an HTTP fragmentation proxy and an HTTPS handshake fragmenter. These components split request headers and TLS handshake records across multiple segments to conceal hostnames and destination server names from inspection systems. The software also includes

Naxsi ist eine Web Application Firewall für NGINX-Server, die Webanwendungen vor Angriffen schützt, indem sie HTTP-Traffic auf schädliche Muster und Schwachstellensignaturen untersucht. Sie fungiert als Filter für Schwachstellensignaturen, der eingehende Anfragen mit bekannten Markern für Bedrohungen wie SQL-Injection und Cross-Site-Scripting abgleicht. Das System enthält ein Lernsystem und ein Dienstprogramm zur automatisierten Regelerstellung, um Fehlalarme zu reduzieren. Es analysiert das Website-Verhalten über die Zeit, um Traffic-Whitelists und Sicherheitsausnahmen für legitimen Datenverkehr zu erstellen. Das Projekt bietet einen Security-Event-Analyzer, der Sicherheitslogs in eine Datenbank importiert, um Trendanalysen durchzuführen. Dies ermöglicht die Identifizierung angreifender Hosts und die Berechnung von Ereignisverhältnissen durch datenbankgestützte Zusammenfassungen.

SpoofDPI ist eine Netzwerkanwendung und ein lokaler Proxy-Server, der als Anti-Zensur-Tool konzipiert ist. Er fungiert als Proxy zur Umgehung von Deep Packet Inspection, der ausgehende HTTP-Anfragen fragmentiert und modifiziert, um Netzwerkfilter und Zensur zu umgehen. Das Projekt erreicht dies durch die Implementierung von HTTP-Request-Fragmentierung, bei der einzelne Anfragen in mehrere kleinere Pakete aufgeteilt werden, um Firewalls zu verwirren. Es führt zudem TCP-Stream-Manipulation und Netzwerkverkehr-Obfuskation durch, um die Art der Webanfragen zu verbergen und regionale Inhaltsblockaden zu umgehen. Das System enthält Funktionen für transparentes Netzwerk-Forwarding und dateibasiertes Konfigurationsmanagement, um zu koordinieren, wie Netzwerkverkehr gehandhabt wird.