How to set up a self-hosted WAF for Webapps in 2 minutes

Описание и применение

Установите Aegis, самодостаточный WAF, за 2 минуты, используя скрипт или Docker, и защитите веб‑приложения от SQL‑инъекций и XSS.

Задача

Deploying a Web Application Firewall (WAF) quickly and without complex Nginx configurations

Результат

Aegis blocks a simulated SQL Injection with HTTP 403 and provides a dashboard for route management and threat monitoring

Рабочий процесс

• Clone the Aegis repository and run the installer script
• Verify the aegis systemd service is active
• Alternatively run the Docker container with ports 8080 and 8081 exposed
• Test WAF by sending a simulated SQL Injection payload to the proxy
• Open the web dashboard at http://localhost:8081 to manage routes and view telemetry

Доказательства

Clone the repository and run the automated installer: git clone https://github.com/divinelabio/aegis.git cd aegis sudo bash install.sh

Источник

docker run -d --name aegis_server \
--restart unless-stopped \
-p 8080:8080 -p 8081:8081 \
-v aegis_data:/var/lib/aegis/data \
-e AEGIS_ADMIN_PASSWORD="ChooseStrongAdminPassword123!" \
ghcr.io/divinelabio/aegis:latest

Источник

curl -i "http://localhost:8080/?id=1%27%20OR%201=1--"

Источник

HTTP/1.1 403 Forbidden X-WAF-Rule-ID: 942100 Access denied: This request was rejected by the application security layer.

Источник