CTF-WAF

A general-purpose WAF for CTF offline competitions with log auditing features.

Introduction

CTF-WAF

CTF-WAF is a web application firewall designed specifically for Capture The Flag (CTF) offline competitions. It provides essential features to enhance security during competitions, including:

IP Blacklisting: Easily manage and block specific IP addresses by adding them to a blacklist.
Log Auditing: Comprehensive logging of events, including file uploads and potential attack patterns.
Attack Interception: Capable of intercepting common web attacks such as XSS, SQL injection, and more.
Customizable Settings: Users can configure the firewall settings to suit their competition needs, including enabling or disabling certain protections.
User-Friendly: Simple integration by including the main PHP file in the protected scripts.

This tool is particularly useful for CTF organizers and participants looking to secure their environments against common threats during competitions.

Back