wafrift-proxy 0.3.1

HTTP forward proxy with automatic WAF evasion and optional TLS interception support.
Documentation
# THIS FILE IS AUTOMATICALLY GENERATED BY CARGO
#
# When uploading crates to the registry Cargo will automatically
# "normalize" Cargo.toml files for maximal compatibility
# with all versions of Cargo and also rewrite `path` dependencies
# to registry (e.g., crates.io) dependencies.
#
# If you are reading this file be aware that the original Cargo.toml
# will likely look very different (and much more reasonable).
# See Cargo.toml.orig for the original contents.

[package]
edition = "2024"
name = "wafrift-proxy"
version = "0.3.1"
authors = ["Santh Project <security@santh.dev>"]
build = false
autolib = false
autobins = false
autoexamples = false
autotests = false
autobenches = false
description = "HTTP forward proxy with automatic WAF evasion and optional TLS interception support."
readme = "README.md"
keywords = [
    "waf",
    "proxy",
    "http",
    "evasion",
    "security",
]
categories = [
    "network-programming",
    "web-programming",
]
license = "MIT OR Apache-2.0"
repository = "https://github.com/santhsecurity/wafrift"
resolver = "2"

[features]
captchaforge = ["dep:wafrift-captchaforge-bridge"]
clipboard = ["dep:arboard"]
default = ["clipboard"]
tls-impersonate = ["wafrift-transport/tls-impersonate"]

[lib]
name = "wafrift_proxy"
path = "src/lib.rs"

[[bin]]
name = "wafrift-proxy"
path = "src/main.rs"

[[test]]
name = "bogon_audit_extras"
path = "tests/bogon_audit_extras.rs"

[[test]]
name = "bogon_scanclient_parity"
path = "tests/bogon_scanclient_parity.rs"

[[test]]
name = "bogon_types_parity"
path = "tests/bogon_types_parity.rs"

[[test]]
name = "captchaforge_install"
path = "tests/captchaforge_install.rs"

[[test]]
name = "challenge_replay"
path = "tests/challenge_replay.rs"

[[test]]
name = "common"
path = "tests/common.rs"

[[test]]
name = "connect_rebind_audit"
path = "tests/connect_rebind_audit.rs"

[[test]]
name = "evade_retry_cap"
path = "tests/evade_retry_cap.rs"

[[test]]
name = "forward_path_e2e"
path = "tests/forward_path_e2e.rs"

[[test]]
name = "intercept_audit_fixes"
path = "tests/intercept_audit_fixes.rs"

[[test]]
name = "intercept_gc_dead_senders"
path = "tests/intercept_gc_dead_senders.rs"

[[test]]
name = "intercept_rendezvous"
path = "tests/intercept_rendezvous.rs"

[[test]]
name = "intercept_timeout_release"
path = "tests/intercept_timeout_release.rs"

[[test]]
name = "log_injection_regression"
path = "tests/log_injection_regression.rs"

[[test]]
name = "mitm_cert_chain"
path = "tests/mitm_cert_chain.rs"

[[test]]
name = "mitm_ip_san"
path = "tests/mitm_ip_san.rs"

[[test]]
name = "mutate_url_pipeline"
path = "tests/mutate_url_pipeline.rs"

[[test]]
name = "oracle_gate"
path = "tests/oracle_gate.rs"

[[test]]
name = "proxy_concurrency_stress"
path = "tests/proxy_concurrency_stress.rs"

[[test]]
name = "proxy_ipv6_test"
path = "tests/proxy_ipv6_test.rs"

[[test]]
name = "proxy_version_flag"
path = "tests/proxy_version_flag.rs"

[[test]]
name = "rate_limit_unbounded_growth"
path = "tests/rate_limit_unbounded_growth.rs"

[[test]]
name = "ssrf_redirect_regression"
path = "tests/ssrf_redirect_regression.rs"

[[test]]
name = "upstream_policy_async"
path = "tests/upstream_policy_async.rs"

[dependencies.anyhow]
version = "1"

[dependencies.arboard]
version = "3"
optional = true
default-features = false

[dependencies.async-trait]
version = "0.1.89"

[dependencies.bytes]
version = "1"

[dependencies.clap]
version = "4"
features = ["derive"]

[dependencies.crossterm]
version = "0.28"

[dependencies.dirs]
version = "6"

[dependencies.futures-util]
version = "0.3.32"

[dependencies.http]
version = "1"

[dependencies.http-body-util]
version = "0.1"

[dependencies.hyper]
version = "1"
features = [
    "server",
    "http1",
    "http2",
]

[dependencies.hyper-util]
version = "0.1"
features = ["tokio"]

[dependencies.moka]
version = "0.12.15"
features = ["future"]

[dependencies.ratatui]
version = "0.30"

[dependencies.rcgen]
version = "0.14.7"
features = [
    "pem",
    "x509-parser",
]

[dependencies.reqwest]
version = "0.12"
features = [
    "rustls-tls",
    "cookies",
    "gzip",
    "brotli",
    "stream",
    "json",
    "http2",
]
default-features = false

[dependencies.rustls]
version = "0.23"
features = ["ring"]

[dependencies.rustls-pki-types]
version = "1.14.0"

[dependencies.serde]
version = "1"
features = ["derive"]

[dependencies.serde_json]
version = "1"

[dependencies.thiserror]
version = "2"

[dependencies.time]
version = "0.3"
features = ["std"]
default-features = false

[dependencies.tokio]
version = "1"
features = ["full"]

[dependencies.tokio-rustls]
version = "0.26"

[dependencies.tracing]
version = "0.1"

[dependencies.tracing-subscriber]
version = "0.3"
features = ["env-filter"]

[dependencies.wafrift-captchaforge-bridge]
version = "0.3.1"
optional = true

[dependencies.wafrift-detect]
version = "0.3.1"

[dependencies.wafrift-encoding]
version = "0.3.1"

[dependencies.wafrift-evolution]
version = "0.3.1"

[dependencies.wafrift-oracle]
version = "0.3.1"

[dependencies.wafrift-strategy]
version = "0.3.1"

[dependencies.wafrift-transport]
version = "0.3.1"

[dependencies.wafrift-types]
version = "0.3.1"

[dependencies.webpki-roots]
version = "1.0.6"

[dev-dependencies.assert_cmd]
version = "2.1"
features = ["color"]
default-features = false

[dev-dependencies.axum]
version = "0.7"
features = [
    "tokio",
    "http1",
    "http2",
]
default-features = false

[dev-dependencies.base64]
version = "0.22.1"

[dev-dependencies.reqwest]
version = "0.12"
features = [
    "rustls-tls",
    "cookies",
    "gzip",
    "brotli",
    "stream",
    "json",
    "system-proxy",
]
default-features = false

[dev-dependencies.scanclient]
version = "0.2.1"
default-features = false

[dev-dependencies.wafrift-oracle]
version = "0.3.1"

[target."cfg(unix)".dependencies.libc]
version = "0.2"

[lints.clippy]
assertions_on_constants = "allow"
doc_lazy_continuation = "allow"
too_many_arguments = "allow"

[lints.rust]
unsafe_code = "warn"
unused_must_use = "deny"