# gotestwaf を Homebrew, Nix でインストール gotestwaf のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:gotestwaf ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install gotestwaf ``` 証拠: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#gotestwaf ``` 証拠: nixpkgs package indexes: pkgs/by-name/go/gotestwaf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## パッケージ情報 - **パッケージキー:** brew:gotestwaf - **パッケージマネージャ:** Homebrew - **パッケージマネージャページ:** - **バージョン:** 0.5.8 - **ソース概要:** Tool for API and OWASP attack simulation - **ホームページ:** - **リポジトリ:** - **上流ドキュメント:** - **ライセンス:** MIT - **ソースアーカイブ:** - **最終更新:** 2026-07-27T16:47:25+02:00 - **生成日時:** 2026-08-04T22:13:35+00:00 ## 実行可能ファイル - gotestwaf (cli) - gotestwaf (エイリアス) ## ビルド依存関係 - go ## インストール挙動 - post-install フック: 未定義 - Bottle: 利用可能 対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux ## バージョンと鮮度 - ページ生成日: 2026-08-04 - マネージャ版: 0.5.8 - マネージャ更新日: 2026-07-27 - ローカルデータ: OK - 上流リポジトリ: https://github.com/wallarm/gotestwaf - 検出された最新: v0.5.8 (最新) ## プロジェクトの歴史と使われ方 GoTestWAF is Wallarm's Go-based command-line tool for simulating API and OWASP-style attacks against web application firewalls, API gateways, IPS products, and related application-security controls. ### プロジェクトの歴史 The repository was created in January 2020. The README describes a scanner that generates malicious requests by combining payloads, encoders, and request placeholders, then records how the evaluated security solution handled those requests. ### 採用の歴史 The project is packaged as a Docker image and a Homebrew formula, which matches its evaluation-tool use case: users can run it near the target application or security appliance without embedding it into application code. ### 使われ方 Users point GoTestWAF at an evaluated URL and run built-in test sets such as OWASP Top 10 and OWASP API, or supply custom YAML test cases. Reports can be generated locally, and releases in 2024 and 2025 emphasize report-format and validation work. ### パッケージ好きにとっての重要性 For package catalogs, GoTestWAF is a niche but useful security-testing CLI: it packages repeatable malicious-request generation as a portable Go binary and container, rather than as a SaaS-only scanner. ### タイムライン - 2020: Repository created. - 2022: README badge identifies GoTestWAF with Black Hat Arsenal USA 2022. - 2024: v0.4.19 and v0.5.x releases published through GitHub releases. - 2025: v0.5.8 release fixed HTML report validation. ### Related projects - OWASP test categories and API-security scenarios shape the bundled test cases. - Wallarm publishes the project and Docker image for WAF and API-security evaluation workflows. ### ソース - - - - - ## セキュリティノート narrow executable package without higher-risk signals. - **Geiger リスク:** グリーン / 低 - narrow executable package without higher-risk signals ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: config.yaml ## ソースデータベース詳細 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** gotestwaf - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## 他のパッケージマネージャ記録 - Nix - gotestwaf: normalized package name match | nixpkgs package indexes: pkgs/by-name/go/gotestwaf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## 関連リンク - [Terminal utility packages](https://pkg.so/ja/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Developer build packages](https://pkg.so/ja/developer-build-tools/) - Matched build, compiler, generator, or developer workflow metadata. - [Language runtime packages](https://pkg.so/ja/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [Networking and protocol packages](https://pkg.so/ja/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [go](https://pkg.so/ja/brew/go/) - Build dependency declared by Homebrew. - [modsecurity](https://pkg.so/ja/brew/modsecurity/) - Shares pkgdb curated category or tags: cli, owasp, security, waf. - [osv-scanner](https://pkg.so/ja/brew/osv-scanner/) - Shares pkgdb curated category or tags: cli, go, security. - [dependency-check](https://pkg.so/ja/brew/dependency-check/) - Shares pkgdb curated category or tags: cli, owasp, security. - [gobuster](https://pkg.so/ja/brew/gobuster/) - Shares pkgdb curated category or tags: cli, go, security. - [govulncheck](https://pkg.so/ja/brew/govulncheck/) - Shares pkgdb curated category or tags: cli, go, security. - [gosec](https://pkg.so/ja/brew/gosec/) - Shares pkgdb curated category or tags: cli, go, security. - [katana](https://pkg.so/ja/brew/katana/) - Shares pkgdb curated category or tags: cli, go, security. - [naabu](https://pkg.so/ja/brew/naabu/) - Shares pkgdb curated category or tags: cli, go, security. - [noir](https://pkg.so/ja/brew/noir/) - Security-sensitive metadata or terminology overlaps. Shared terms: api, api-security, attack, cli, security. - [authoscope](https://pkg.so/ja/brew/authoscope/) - Security-sensitive metadata or terminology overlaps. Shared terms: attack, cli, security, testing. ## Combined YAML source View the package source record on GitHub. [combined/gotestwaf.yml](https://github.com/mxcl/pkgdb/blob/main/combined/gotestwaf.yml) ## ソース - pkg.so package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph