# gotestwaf mit Homebrew, Nix installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für gotestwaf in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:gotestwaf ``` Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install gotestwaf ``` Evidenz: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#gotestwaf ``` Evidenz: nixpkgs package indexes: pkgs/by-name/go/gotestwaf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Paketfakten - **Paketschlüssel:** brew:gotestwaf - **Paketmanager:** Homebrew - **Paketmanager-Seite:** - **Version:** 0.5.8 - **Quellzusammenfassung:** Tool for API and OWASP attack simulation - **Homepage:** - **Repository:** - **Upstream-Dokumentation:** - **Lizenz:** MIT - **Quellarchiv:** - **Zuletzt aktualisiert:** 2026-07-27T16:47:25+02:00 - **Generiert:** 2026-08-04T22:13:35+00:00 ## Executables - gotestwaf (cli) - gotestwaf (Alias) ## Build-Abhängigkeiten - go ## Installationsverhalten - Post-install-Hook: nicht definiert - Bottle: verfügbar auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux ## Version und Aktualität - Seite generiert: 2026-08-04 - Manager-Version: 0.5.8 - Manager aktualisiert: 2026-07-27 - lokale Daten: OK - Upstream-Repository: https://github.com/wallarm/gotestwaf - neueste erkannte Version: v0.5.8 (aktuell) ## Projektgeschichte und Nutzung GoTestWAF is Wallarm's Go-based command-line tool for simulating API and OWASP-style attacks against web application firewalls, API gateways, IPS products, and related application-security controls. ### Projektgeschichte The repository was created in January 2020. The README describes a scanner that generates malicious requests by combining payloads, encoders, and request placeholders, then records how the evaluated security solution handled those requests. ### Adoptionsgeschichte The project is packaged as a Docker image and a Homebrew formula, which matches its evaluation-tool use case: users can run it near the target application or security appliance without embedding it into application code. ### Wie es verwendet wird Users point GoTestWAF at an evaluated URL and run built-in test sets such as OWASP Top 10 and OWASP API, or supply custom YAML test cases. Reports can be generated locally, and releases in 2024 and 2025 emphasize report-format and validation work. ### Warum Paket-Nerds sich dafür interessieren For package catalogs, GoTestWAF is a niche but useful security-testing CLI: it packages repeatable malicious-request generation as a portable Go binary and container, rather than as a SaaS-only scanner. ### Zeitleiste - 2020: Repository created. - 2022: README badge identifies GoTestWAF with Black Hat Arsenal USA 2022. - 2024: v0.4.19 and v0.5.x releases published through GitHub releases. - 2025: v0.5.8 release fixed HTML report validation. ### Related projects - OWASP test categories and API-security scenarios shape the bundled test cases. - Wallarm publishes the project and Docker image for WAF and API-security evaluation workflows. ### Quellen - - - - - ## Sicherheitshinweise narrow executable package without higher-risk signals. - **Geiger-Risiko:** grün / niedrig - narrow executable package without higher-risk signals ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: config.yaml ## Details aus der Quelldatenbank - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** gotestwaf - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Andere Paketmanager-Einträge - Nix - gotestwaf: normalized package name match | nixpkgs package indexes: pkgs/by-name/go/gotestwaf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Verwandte Links - [Terminal utility packages](https://pkg.so/de/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Developer build packages](https://pkg.so/de/developer-build-tools/) - Matched build, compiler, generator, or developer workflow metadata. - [Language runtime packages](https://pkg.so/de/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [Networking and protocol packages](https://pkg.so/de/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [go](https://pkg.so/de/brew/go/) - Build dependency declared by Homebrew. - [modsecurity](https://pkg.so/de/brew/modsecurity/) - Shares pkgdb curated category or tags: cli, owasp, security, waf. - [osv-scanner](https://pkg.so/de/brew/osv-scanner/) - Shares pkgdb curated category or tags: cli, go, security. - [dependency-check](https://pkg.so/de/brew/dependency-check/) - Shares pkgdb curated category or tags: cli, owasp, security. - [gobuster](https://pkg.so/de/brew/gobuster/) - Shares pkgdb curated category or tags: cli, go, security. - [govulncheck](https://pkg.so/de/brew/govulncheck/) - Shares pkgdb curated category or tags: cli, go, security. - [gosec](https://pkg.so/de/brew/gosec/) - Shares pkgdb curated category or tags: cli, go, security. - [katana](https://pkg.so/de/brew/katana/) - Shares pkgdb curated category or tags: cli, go, security. - [naabu](https://pkg.so/de/brew/naabu/) - Shares pkgdb curated category or tags: cli, go, security. - [noir](https://pkg.so/de/brew/noir/) - Security-sensitive metadata or terminology overlaps. Shared terms: api, api-security, attack, cli, security. - [authoscope](https://pkg.so/de/brew/authoscope/) - Security-sensitive metadata or terminology overlaps. Shared terms: attack, cli, security, testing. ## Combined YAML source View the package source record on GitHub. [combined/gotestwaf.yml](https://github.com/mxcl/pkgdb/blob/main/combined/gotestwaf.yml) ## Quellen - pkg.so package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph