Awesome GitHub RepositoriesHTTP Request Filtering

This project is a PHP e-commerce platform and enterprise storefront framework designed for building and managing online stores. It functions as a modular PHP application and headless commerce engine, separating e-commerce business logic from frontend presentation to support multiple storefronts and devices. The system is built on a modular architecture that allows developers to add custom business logic and third-party integrations. It utilizes a service-contract-based API to ensure stability across module implementations and employs dependency-injection for object lifecycle management. Core

jwt-auth is a PHP package providing JSON Web Token authentication for Laravel and Lumen applications. It serves as a token provider and stateless session manager, allowing applications to issue and validate signed tokens to manage user identity across network requests. The library implements stateless API security by verifying identity tokens sent in request headers, removing the requirement to store session data on the server. It uses signed tokens to verify user credentials and restrict access to protected resources. The project provides capabilities for user access control, authentication

BunkerWeb is a containerized suite of infrastructure tools that functions as a cloud-native web application firewall and Nginx reverse proxy. It provides a security layer for web applications, combining traffic routing with automated SSL certificate management and a web-based security dashboard for monitoring and configuration. The project distinguishes itself through its deep integration with container orchestrators, serving as a Kubernetes ingress controller that automates security settings and service discovery via container labels. It features a plugin-based extension model and a manageme

Bunkerized Nginx is a containerized security automation system that provides a secure reverse proxy and web application firewall. It focuses on protecting web applications by monitoring container labels within cloud-native orchestration systems to automatically update security settings and firewall rules. The system distinguishes itself through automated security operations, including the automatic management of SSL certificates and an automated client banning mechanism that blocks IP addresses based on HTTP status codes. It features bot challenge mechanisms using CAPTCHAs, JavaScript, or coo

Grape is a RESTful web service framework for Ruby designed for building structured APIs. It provides a declarative syntax for routing and parameter validation, allowing developers to map HTTP verbs to logic through a domain specific language. The framework is distinguished by its built-in support for service versioning, which can be managed via URL paths, custom headers, or request parameters. It also features a modular architecture that allows large services to be constructed by nesting smaller API definitions. The project covers comprehensive API lifecycle capabilities, including schema-dr

Spark is a lightweight Java web framework and embedded server designed for building web applications with minimal boilerplate. It functions as an HTTP routing engine that maps URL paths and methods to handler functions, providing a specialized domain specific language for web development in Kotlin. The framework enables the implementation of REST APIs and web services through the definition of HTTP routes. It supports the extraction of dynamic path parameters and the transformation of response data into formats such as JSON. Additional capabilities include the ability to serve static files a

ModSecurity is an open-source web application firewall and security engine. It functions as an HTTP traffic inspector and intrusion detection system that filters incoming web requests and responses against a set of security rules to block threats and prevent attacks on web servers. The project provides a modular framework for implementing restrictive security policies and custom filtering logic. It identifies and blocks common injection attacks, such as cross-site scripting and SQL injection, while hardening web applications to reduce their overall attack surface. Its broader capabilities in

This project is a Node.js HTTP proxy server that enables cross-domain API requests from browsers by injecting Cross-Origin Resource Sharing headers into HTTP responses. It functions as a reverse proxy gateway and header manipulator, allowing for the interception and modification of traffic between a client and a target server. The proxy provides mechanisms to bypass browser same-origin policy restrictions through automated header injection. It includes capabilities for origin-based rate limiting and request interception to control traffic flow and prevent unauthorized usage of the proxy servi

uBlock is a browser content blocker and web privacy tool designed to prevent advertisements and tracking scripts from loading. It functions as a network request filter, a DOM element hider, and a script execution controller to manage how web pages load and render. The project distinguishes itself through a combination of network-level request interception and cosmetic filtering. It uses declarative filter lists and pattern-based matching to block trackers and pop-ups, while employing CSS selectors and wildcard entity matching to remove visual components across multiple regional domain variant

Higress is an AI API gateway and cloud-native traffic manager that functions as a Kubernetes ingress controller. It provides a centralized system for routing, securing, and optimizing traffic directed toward large language models, AI agents, and microservice architectures. The project distinguishes itself through deep AI orchestration, including the ability to host and manage Model Context Protocol servers that transform REST APIs into tools for AI agents. It features specialized AI infrastructure for model request proxying, protocol translation across multiple providers, and semantic-based c

Proxyman is a cross-platform HTTP debugging proxy that captures, inspects, and modifies HTTP, HTTPS, and WebSocket traffic. It functions as a man-in-the-middle proxy, decrypting SSL/TLS traffic to allow real-time inspection and modification of encrypted requests and responses. The tool is designed for debugging web and mobile applications, with capabilities for API mocking and simulation, scriptable traffic modification, and team collaboration on network logs. What distinguishes Proxyman is its deep integration with mobile and cross-platform development workflows. It provides automated certif

RuoYi-Vue3 is a full-stack administrative dashboard and permission management framework built with SpringBoot and Vue 3. It serves as an enterprise management backend providing a decoupled architecture that separates the API from the user interface. The project features a low-code CRUD generator that automatically produces frontend and backend boilerplate code and API documentation from database tables. It implements a comprehensive role-based access control system for managing users, departments, and granular permissions at the menu and button levels, secured by stateless JSON Web Token auth

laravel-cors es un paquete de middleware para aplicaciones Laravel que gestiona el Intercambio de Recursos de Origen Cruzado (CORS). Funciona como una capa de seguridad HTTP que valida los orígenes de las solicitudes e inyecta los encabezados necesarios en las respuestas de la aplicación para controlar cómo los dominios externos acceden a una API backend. El proyecto proporciona un motor de políticas basado en configuración para comparar los orígenes y métodos de las solicitudes entrantes con los valores permitidos. Esto incluye soporte para coincidencia de origen con comodines para autorizar múltiples dominios de confianza a través de una única regla y el manejo automático de solicitudes OPTIONS de pre-vuelo. El sistema se integra en el pipeline de solicitud-respuesta para proporcionar control de acceso global a la API y configuración de seguridad del navegador. Gestiona la inyección de encabezados de seguridad para resolver errores de navegador de origen cruzado y asegurar una comunicación segura entre un servidor Laravel y frontends alojados en diferentes dominios.

VCR is a Ruby library that records and replays HTTP interactions during test runs, storing them in serialized cassette files. It captures real HTTP requests and responses, then serves those recorded responses instead of making actual network calls, enabling fast and deterministic test suites that work offline. The library provides configurable request matching, allowing comparisons based on method, URI, host, path, body, or headers to find the correct recorded response. It supports scheduled cassette re-recording to automatically refresh stored interactions at a configurable interval, keeping

CodeIgniter is a PHP web framework built on the Model-View-Controller pattern, designed for building full-stack web applications. It provides a lightweight toolkit with minimal configuration, organizing application logic into controllers, models, and views for clean separation of concerns. The framework includes a fluent query builder for constructing SQL statements programmatically, PSR-4 autoloading with namespace mapping, and a service-based dependency injection container for managing shared class instances. The framework distinguishes itself through its comprehensive set of built-in tools

Helicone is an AI gateway and observability platform designed to intercept, manage, and monitor interactions with large language models. By acting as a reverse-proxy, it provides a centralized layer for routing requests across multiple AI providers, allowing developers to maintain consistent application logic while gaining deep visibility into model performance, usage, and costs. The platform distinguishes itself through a robust suite of traffic management and prompt engineering tools. It enables policy-driven control, including automatic failover between providers, rate limiting, and edge-b

Este proyecto es un framework de integración que arranca servicios de llamada a procedimiento remoto (RPC) de Apache Dubbo dentro de aplicaciones Spring Boot. Sirve como un framework de comunicación de microservicios que permite la implementación de servicios RPC, descubrimiento de servicios y gobernanza distribuida mediante configuración automatizada. El proyecto se distingue por proporcionar un puente RPC entre lenguajes, permitiendo que servicios escritos en diferentes lenguajes se comuniquen mediante estándares como gRPC y Protobuf. Además, permite la exposición de microservicios backend como endpoints REST utilizando el protocolo Triple para acceso directo desde navegadores web y clientes de terceros. El framework cubre una amplia gama de capacidades, incluyendo gobernanza de servicios distribuidos para enrutamiento de tráfico y limitación de tasa (rate limiting), gestión centralizada de configuración y observabilidad de microservicios para el rastreo de solicitudes y monitoreo de salud. También admite diversas capas de transporte e integraciones de almacenamiento para Redis y Memcached. El proyecto proporciona starters y configuraciones para automatizar el arranque de la infraestructura RPC dentro del entorno Spring Boot.

GreenTunnel es una utilidad de red diseñada para eludir la inspección profunda de paquetes (DPI) y saltar la censura de internet. Funciona como una herramienta que modifica los paquetes de red salientes y cifra las consultas DNS para evitar que los proveedores de servicios de internet y los sistemas de filtrado de red detecten y bloqueen destinos web específicos. El proyecto implementa un proxy de fragmentación HTTP y un fragmentador de handshake HTTPS. Estos componentes dividen los encabezados de solicitud y los registros de handshake TLS en múltiples segmentos para ocultar los nombres de host y los nombres de servidores de destino de los sistemas de inspección. El software también incluye un cliente DNS-over-HTTPS para recuperar direcciones IP utilizando protocolos cifrados, evitando la interceptación o suplantación de consultas DNS estándar. Las capacidades adicionales cubren la manipulación de paquetes TCP y la fragmentación de segmentos en la capa de transporte para evadir la inspección de tráfico.

Naxsi es un firewall de aplicaciones web para servidores NGINX diseñado para proteger aplicaciones web de ataques inspeccionando el tráfico HTTP en busca de patrones maliciosos y firmas de vulnerabilidad. Funciona como un filtro de firmas de vulnerabilidad que compara las solicitudes entrantes con marcadores conocidos de amenazas como inyección SQL y cross-site scripting (XSS). El sistema incluye un sistema de aprendizaje y una utilidad de generación automática de reglas para reducir los falsos positivos. Analiza el comportamiento del sitio web a lo largo del tiempo para crear listas blancas de tráfico y excepciones de seguridad para patrones de tráfico legítimos. El proyecto proporciona un analizador de eventos de seguridad que importa registros de seguridad a una base de datos para realizar análisis de tendencias. Esto permite la identificación de hosts infractores y el cálculo de ratios de eventos mediante resúmenes basados en bases de datos.

SpoofDPI es una aplicación de red y servidor proxy local diseñado como una herramienta contra la censura. Funciona como un proxy de elusión de inspección profunda de paquetes que fragmenta y modifica las solicitudes HTTP salientes para evadir filtros de red y censura. El proyecto logra esto implementando la fragmentación de solicitudes HTTP, dividiendo las solicitudes individuales en múltiples paquetes más pequeños para confundir a los firewalls. También realiza manipulación de flujos TCP y ofuscación de tráfico de red para ocultar la naturaleza de las solicitudes web y evitar bloqueos de contenido regionales. El sistema incluye capacidades para el reenvío de red transparente y la gestión de configuración basada en archivos para coordinar cómo se maneja el tráfico de red.