# 使用 Homebrew, Nix 安装 gotestwaf 查看 gotestwaf 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。 ## 安装 ```sh sudo av install brew:gotestwaf ``` 其他安装命令: ### macOS - Homebrew (100%): ```sh brew install gotestwaf ``` 证据: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#gotestwaf ``` 证据: nixpkgs package indexes: pkgs/by-name/go/gotestwaf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## 软件包事实 - **软件包键:** brew:gotestwaf - **软件包管理器:** Homebrew - **软件包管理器页面:** - **版本:** 0.5.8 - **来源摘要:** Tool for API and OWASP attack simulation - **主页:** - **仓库:** - **上游文档:** - **许可证:** MIT - **源码归档:** - **最后更新:** 2026-07-27T16:47:25+02:00 - **已生成:** 2026-08-04T22:13:35+00:00 ## 可执行文件 - gotestwaf (cli) - gotestwaf (别名) ## 构建依赖 - go ## 安装行为 - post-install 钩子: 未定义 - Bottle: 可用 于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux ## 版本和新鲜度 - 页面生成时间: 2026-08-04 - 管理器版本: 0.5.8 - 管理器更新时间: 2026-07-27 - 本地数据: OK - 上游仓库: https://github.com/wallarm/gotestwaf - 检测到的最新版本: v0.5.8 (当前) ## 项目历史与用法 GoTestWAF is Wallarm's Go-based command-line tool for simulating API and OWASP-style attacks against web application firewalls, API gateways, IPS products, and related application-security controls. ### 项目历史 The repository was created in January 2020. The README describes a scanner that generates malicious requests by combining payloads, encoders, and request placeholders, then records how the evaluated security solution handled those requests. ### 采用历史 The project is packaged as a Docker image and a Homebrew formula, which matches its evaluation-tool use case: users can run it near the target application or security appliance without embedding it into application code. ### 使用方式 Users point GoTestWAF at an evaluated URL and run built-in test sets such as OWASP Top 10 and OWASP API, or supply custom YAML test cases. Reports can be generated locally, and releases in 2024 and 2025 emphasize report-format and validation work. ### 为什么软件包爱好者会关心 For package catalogs, GoTestWAF is a niche but useful security-testing CLI: it packages repeatable malicious-request generation as a portable Go binary and container, rather than as a SaaS-only scanner. ### 时间线 - 2020: Repository created. - 2022: README badge identifies GoTestWAF with Black Hat Arsenal USA 2022. - 2024: v0.4.19 and v0.5.x releases published through GitHub releases. - 2025: v0.5.8 release fixed HTML report validation. ### Related projects - OWASP test categories and API-security scenarios shape the bundled test cases. - Wallarm publishes the project and Docker image for WAF and API-security evaluation workflows. ### 来源 - - - - - ## 安全说明 narrow executable package without higher-risk signals. - **Geiger 风险:** 绿色 / 低 - narrow executable package without higher-risk signals ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: config.yaml ## 源数据库详情 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** gotestwaf - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## 其他软件包管理器记录 - Nix - gotestwaf: normalized package name match | nixpkgs package indexes: pkgs/by-name/go/gotestwaf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## 相关链接 - [Terminal utility packages](https://pkg.so/zh-hans/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Developer build packages](https://pkg.so/zh-hans/developer-build-tools/) - Matched build, compiler, generator, or developer workflow metadata. - [Language runtime packages](https://pkg.so/zh-hans/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [Networking and protocol packages](https://pkg.so/zh-hans/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [go](https://pkg.so/zh-hans/brew/go/) - Build dependency declared by Homebrew. - [modsecurity](https://pkg.so/zh-hans/brew/modsecurity/) - Shares pkgdb curated category or tags: cli, owasp, security, waf. - [osv-scanner](https://pkg.so/zh-hans/brew/osv-scanner/) - Shares pkgdb curated category or tags: cli, go, security. - [dependency-check](https://pkg.so/zh-hans/brew/dependency-check/) - Shares pkgdb curated category or tags: cli, owasp, security. - [gobuster](https://pkg.so/zh-hans/brew/gobuster/) - Shares pkgdb curated category or tags: cli, go, security. - [govulncheck](https://pkg.so/zh-hans/brew/govulncheck/) - Shares pkgdb curated category or tags: cli, go, security. - [gosec](https://pkg.so/zh-hans/brew/gosec/) - Shares pkgdb curated category or tags: cli, go, security. - [katana](https://pkg.so/zh-hans/brew/katana/) - Shares pkgdb curated category or tags: cli, go, security. - [naabu](https://pkg.so/zh-hans/brew/naabu/) - Shares pkgdb curated category or tags: cli, go, security. - [noir](https://pkg.so/zh-hans/brew/noir/) - Security-sensitive metadata or terminology overlaps. Shared terms: api, api-security, attack, cli, security. - [authoscope](https://pkg.so/zh-hans/brew/authoscope/) - Security-sensitive metadata or terminology overlaps. Shared terms: attack, cli, security, testing. ## Combined YAML source View the package source record on GitHub. [combined/gotestwaf.yml](https://github.com/mxcl/pkgdb/blob/main/combined/gotestwaf.yml) ## 来源 - pkg.so package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph