bunkerity / bunkerity/bunkerweb-plugins

[FEATURE] Implement Payload all the things

Open
#201 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Python
Stars
62
Forks
23
Avg merge
1m
Merged PRs (30d)
2

Description

### What's needed and why?

Everyone needs robust payload filtering to protect their website against common web attacks. However, configuring and maintaining such rules manually is time-consuming and mentally exhausting, especially as threat landscapes evolve.

### Implementations ideas (optional)

Add a built-in payload filtering mechanism that covers the most common attack payloads (SQLi, XSS, path traversal, etc.), drawing inspiration from the PayloadsAllTheThings repository as a reference for comprehensive coverage.
Reference: https://github.com/swisskyrepo/PayloadsAllTheThings

Discuss with @TheophileDiot

### Code of Conduct

- [x] I agree to follow this project's Code of Conduct

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the linked PayloadsAllTheThings repository and discuss scope with @TheophileDiot. Define which SQLi, XSS, and path-traversal payload classes are covered and how protection will be verified; the issue does not name files, entry points, or tests.

Written by the indexing model from the issue text.

Assessment

Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.