SIEM'ish type web defender
Source Reddit Cybersecurity
Discussion
GPEWebDefender is an open-source, lightweight web-attack monitoring tool designed to sit alongside web servers like nginx or Caddy. It tails access logs to detect probing and exploitation attempts such as SQL injection, XSS, path traversal, and known scanner activity. It is not a WAF or host-based intrusion detection system but provides real-time alerts and a dashboard for monitoring attacks. The tool is written in Go, designed for low resource usage, and supports GeoIP mapping and log formats including JSON. It is intended for use by administrators to gain insight into web attack activity without impacting site availability.
r/cybersecurity (opens in a new tab)u/TheRetardedElon0 points0 comments
so i decided to test out some models and proper building and wanted to really test some ideas..
one of those ideas being the web defender, primarily revolving around web server / platform based exploitation and vulnerabilities and attack vectors.
it's free to use or do whatever you want with and the SVG art was all generated by Gemini if you're looking to try and match it, but ill continue to add onto the project or develop it out if anyone really likes it or has a use for it or wants to see it do other cool things.
oh also its GO based so its very low use, it barely even makes my 2vcpu unit flinch right now!
https://github.com/TheRetardedElon/GPEWebDefender