[package]
edition = "2024"
name = "wafrift-proxy"
version = "0.3.1"
authors = ["Santh Project <security@santh.dev>"]
build = false
autolib = false
autobins = false
autoexamples = false
autotests = false
autobenches = false
description = "HTTP forward proxy with automatic WAF evasion and optional TLS interception support."
readme = "README.md"
keywords = [
"waf",
"proxy",
"http",
"evasion",
"security",
]
categories = [
"network-programming",
"web-programming",
]
license = "MIT OR Apache-2.0"
repository = "https://github.com/santhsecurity/wafrift"
resolver = "2"
[features]
captchaforge = ["dep:wafrift-captchaforge-bridge"]
clipboard = ["dep:arboard"]
default = ["clipboard"]
tls-impersonate = ["wafrift-transport/tls-impersonate"]
[lib]
name = "wafrift_proxy"
path = "src/lib.rs"
[[bin]]
name = "wafrift-proxy"
path = "src/main.rs"
[[test]]
name = "bogon_audit_extras"
path = "tests/bogon_audit_extras.rs"
[[test]]
name = "bogon_scanclient_parity"
path = "tests/bogon_scanclient_parity.rs"
[[test]]
name = "bogon_types_parity"
path = "tests/bogon_types_parity.rs"
[[test]]
name = "captchaforge_install"
path = "tests/captchaforge_install.rs"
[[test]]
name = "challenge_replay"
path = "tests/challenge_replay.rs"
[[test]]
name = "common"
path = "tests/common.rs"
[[test]]
name = "connect_rebind_audit"
path = "tests/connect_rebind_audit.rs"
[[test]]
name = "evade_retry_cap"
path = "tests/evade_retry_cap.rs"
[[test]]
name = "forward_path_e2e"
path = "tests/forward_path_e2e.rs"
[[test]]
name = "intercept_audit_fixes"
path = "tests/intercept_audit_fixes.rs"
[[test]]
name = "intercept_gc_dead_senders"
path = "tests/intercept_gc_dead_senders.rs"
[[test]]
name = "intercept_rendezvous"
path = "tests/intercept_rendezvous.rs"
[[test]]
name = "intercept_timeout_release"
path = "tests/intercept_timeout_release.rs"
[[test]]
name = "log_injection_regression"
path = "tests/log_injection_regression.rs"
[[test]]
name = "mitm_cert_chain"
path = "tests/mitm_cert_chain.rs"
[[test]]
name = "mitm_ip_san"
path = "tests/mitm_ip_san.rs"
[[test]]
name = "mutate_url_pipeline"
path = "tests/mutate_url_pipeline.rs"
[[test]]
name = "oracle_gate"
path = "tests/oracle_gate.rs"
[[test]]
name = "proxy_concurrency_stress"
path = "tests/proxy_concurrency_stress.rs"
[[test]]
name = "proxy_ipv6_test"
path = "tests/proxy_ipv6_test.rs"
[[test]]
name = "proxy_version_flag"
path = "tests/proxy_version_flag.rs"
[[test]]
name = "rate_limit_unbounded_growth"
path = "tests/rate_limit_unbounded_growth.rs"
[[test]]
name = "ssrf_redirect_regression"
path = "tests/ssrf_redirect_regression.rs"
[[test]]
name = "upstream_policy_async"
path = "tests/upstream_policy_async.rs"
[dependencies.anyhow]
version = "1"
[dependencies.arboard]
version = "3"
optional = true
default-features = false
[dependencies.async-trait]
version = "0.1.89"
[dependencies.bytes]
version = "1"
[dependencies.clap]
version = "4"
features = ["derive"]
[dependencies.crossterm]
version = "0.28"
[dependencies.dirs]
version = "6"
[dependencies.futures-util]
version = "0.3.32"
[dependencies.http]
version = "1"
[dependencies.http-body-util]
version = "0.1"
[dependencies.hyper]
version = "1"
features = [
"server",
"http1",
"http2",
]
[dependencies.hyper-util]
version = "0.1"
features = ["tokio"]
[dependencies.moka]
version = "0.12.15"
features = ["future"]
[dependencies.ratatui]
version = "0.30"
[dependencies.rcgen]
version = "0.14.7"
features = [
"pem",
"x509-parser",
]
[dependencies.reqwest]
version = "0.12"
features = [
"rustls-tls",
"cookies",
"gzip",
"brotli",
"stream",
"json",
"http2",
]
default-features = false
[dependencies.rustls]
version = "0.23"
features = ["ring"]
[dependencies.rustls-pki-types]
version = "1.14.0"
[dependencies.serde]
version = "1"
features = ["derive"]
[dependencies.serde_json]
version = "1"
[dependencies.thiserror]
version = "2"
[dependencies.time]
version = "0.3"
features = ["std"]
default-features = false
[dependencies.tokio]
version = "1"
features = ["full"]
[dependencies.tokio-rustls]
version = "0.26"
[dependencies.tracing]
version = "0.1"
[dependencies.tracing-subscriber]
version = "0.3"
features = ["env-filter"]
[dependencies.wafrift-captchaforge-bridge]
version = "0.3.1"
optional = true
[dependencies.wafrift-detect]
version = "0.3.1"
[dependencies.wafrift-encoding]
version = "0.3.1"
[dependencies.wafrift-evolution]
version = "0.3.1"
[dependencies.wafrift-oracle]
version = "0.3.1"
[dependencies.wafrift-strategy]
version = "0.3.1"
[dependencies.wafrift-transport]
version = "0.3.1"
[dependencies.wafrift-types]
version = "0.3.1"
[dependencies.webpki-roots]
version = "1.0.6"
[dev-dependencies.assert_cmd]
version = "2.1"
features = ["color"]
default-features = false
[dev-dependencies.axum]
version = "0.7"
features = [
"tokio",
"http1",
"http2",
]
default-features = false
[dev-dependencies.base64]
version = "0.22.1"
[dev-dependencies.reqwest]
version = "0.12"
features = [
"rustls-tls",
"cookies",
"gzip",
"brotli",
"stream",
"json",
"system-proxy",
]
default-features = false
[dev-dependencies.scanclient]
version = "0.2.1"
default-features = false
[dev-dependencies.wafrift-oracle]
version = "0.3.1"
[target."cfg(unix)".dependencies.libc]
version = "0.2"
[lints.clippy]
assertions_on_constants = "allow"
doc_lazy_continuation = "allow"
too_many_arguments = "allow"
[lints.rust]
unsafe_code = "warn"
unused_must_use = "deny"