Cryptography

Please visit web/SSL page.

Firewall

https://github.com/sonertari/UTMFW

Ports: https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers

ALG

China Telecom Modem - Application-layer Gateway

Service TCP UDP Memo
H.323 1720 1719 VoIP
RTSP     554 554 real-time media streams
L2TP     1701
PPTP     1723
IPSEC   4500 L3:50/51
SIP 5060/5061 5060 VoIP
FTP 21

IDS/IPS

Network Intrusion Detection System (NIDS) engine
Network Intrusion Prevention System (NIPS) engine
Network Security Monitoring (NSM) engine

Snort(NIPS/NIDS)

https://doc.pfsense.org/index.php/Setup_Snort_Package

OSSEC(HIDS)

https://en.wikipedia.org/wiki/OSSEC
log analysis, integrity checking, Windows registry monitoring, rootkit detection, time-based alerting, and active response.

https://ossec.github.io/docs/manual/supported-systems.html

Suricata(NIDS/NIPS/MSM)

Suricata is a network IDS, IPS and NSM engine.
https://github.com/OISF/suricata
https://suricata-ids.org/features/all-features/
w/ pfSense: http://elatov.github.io/2016/11/setup-suricata-on-pfsense/
w/ Mikrotik: https://forum.mikrotik.com/viewtopic.php?t=111727

Compare

https://www.aldeid.com/wiki/Suricata-vs-snort

Web Vulnerability Scanner

Tools list

https://github.com/infoslack/awesome-web-hacking
http://www.toolswatch.org/2017/02/2016-top-security-tools-as-voted-by-toolswatch-org-readers/
https://www.owasp.org/index.php/Category:Vulnerability_Scanning_Tools

Tools

OWASP Zed Attack Proxy:
https://github.com/zaproxy/zaproxy/wiki/Introduction
https://null-byte.wonderhowto.com/how-to/hack-like-pro-hack-web-apps-part-6-using-owasp-zap-find-vulnerabilities-0168129/ OWASP Web Testing Framework: https://owtf.github.io/
OWASP Web Testing Environment Project: https://www.owasp.org/index.php/OWASP_Web_Testing_Environment_Project

https://github.com/sullo/nikto
https://github.com/subgraph/Vega/wiki
https://github.com/anilbaranyelken/tulpar
https://github.com/dpnishant/raptor

How to hack

https://github.com/ethicalhack3r/DVWA
a PHP/MySQL web application that is damn vulnerable.

https://www.youtube.com/playlist?list=PL0-xwzAwzllx4w5OYdRoVTqlNvQ7xALNM

WAF

ModSecurity

https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual
support Apache, IIS7 or Nginx
Nginx: must be compiled with the source code of the main server

Application Supported

https://modsecurity.org/application_coverage.html

pfsense

http://pfsensesetup.com/wp-content/uploads/2014/10/pfsense_modsecurity01.png

Open Web Application Security Project

https://coreruleset.org/ https://hub.docker.com/r/owasp/modsecurity/

Nginx

https://hub.docker.com/r/nodeintegration/nginx-modsecurity/
https://github.com/alexazhou/VeryNginx
https://www.nginx.com/products/nginx-waf/#free-trial
https://github.com/nbs-system/naxsi (Nginx Anti XSS & SQL Injection)

OpenResty

https://github.com/p0pr0ck5/lua-resty-waf
High-performance WAF built on the OpenResty stack

Cloud

https://www.cloudflare.com/waf/
https://aws.amazon.com/waf/
https://www.aliyun.com/product/waf

Hardware

http://help.sonicwall.com/help/sw/eng/8112/8/0/0/content/Chapter2_Overview.03.28.html
https://www.cisco.com/c/en/us/products/collateral/application-networking-services/ace-web-application-firewall/data_sheet_c78-458627.html