[{"data":1,"prerenderedAt":139},["ShallowReactive",2],{"repo-mrash-fwknop-en":3,"i18n-mrash-fwknop-en":136},{"mirrorPool":4,"detail":13,"relatedProjects":73},[5,9],{"key":6,"label":7,"base":8,"type":6},"github","mirror.github","https:\u002F\u002Fgithub.com\u002F",{"key":10,"label":11,"base":12,"type":10},"auto-proxy","mirror.autoProxy","https:\u002F\u002Fgithub.xxlab.tech\u002F",{"owner":14,"repo":15,"repoId":16,"repoUrl":17,"starCount":18,"language":19,"description":20,"languages":21,"screenshots":34,"homepage":35,"pushedAt":36,"ownerAvatar":37,"ownerName":38,"ownerBio":39,"lastSyncTime":40,"lastReleaseTime":41,"tags":42,"license":50,"category":51,"subgroup":52,"releases":53},"mrash","fwknop",1887353,"https:\u002F\u002Fgithub.com\u002Fmrash\u002Ffwknop",1465,"Perl","Single Packet Authorization > Port Knocking",{"Perl":22,"C":23,"Raku":24,"Roff":25,"XS":26,"Python":27,"1C Enterprise":28,"Makefile":29,"Shell":29,"M4":30,"Java":31,"Objective-C":31,"Erlang":32,"HTML":33,"Limbo":33},42.4,36.1,10.3,3.3,1.6,1.4,1.1,1,0.8,0.4,0.2,0.1,[],"http:\u002F\u002Fwww.cipherdyne.org\u002Ffwknop\u002F","2026-06-01","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F380228?v=4","Michael Rash","Creator of Single Packet Authorization for Zero Trust architectures, author of \"Linux Firewalls: Attack Detection and Response\" from No Starch Press.","2026-10-03T12:37:02.247057+00:00","2024-02-07T02:05:04Z",[43,44,45,46,47,48,49],"authentication","authorization","firewall","hmac","port-knocker","spa","zero-trust","GPL-2.0","network","防火墙工具",[54],{"tag":55,"publishAt":41,"semVer":56,"prerelease":60,"assets":61},"2.6.11",[57,58,59],2,6,11,false,[62,68],{"fileName":63,"sizeMb":64,"sha256":65,"downloadCount":66,"originUrl":67},"fwknop-2.6.11.tar.bz2",1.73,"",169,"https:\u002F\u002Fgithub.com\u002Fmrash\u002Ffwknop\u002Freleases\u002Fdownload\u002F2.6.11\u002Ffwknop-2.6.11.tar.bz2",{"fileName":69,"sizeMb":70,"sha256":65,"downloadCount":71,"originUrl":72},"fwknop-2.6.11.tar.gz",1.92,553,"https:\u002F\u002Fgithub.com\u002Fmrash\u002Ffwknop\u002Freleases\u002Fdownload\u002F2.6.11\u002Ffwknop-2.6.11.tar.gz",[74,92,106],{"owner":75,"repo":76,"repoId":77,"category":51,"subgroup":52,"language":78,"tags":79,"starCount":82,"ownerUid":83,"latestTag":84,"platforms":85,"lastReleaseTime":89,"downloadCount":90,"description":91},"TecharoHQ","anubis",950140488,"Go",[80,81],"defense","security",23642,195942235,"v1.28.2",[86,87,88],"windows","linux","other","2026-10-23T05:58:13Z",157,"A Web AI Firewall Utility that protects upstream resources from scraper bots by weighing connections with one or more challenges.",{"owner":93,"repo":94,"repoId":95,"category":51,"subgroup":52,"language":96,"tags":97,"starCount":98,"ownerUid":99,"latestTag":100,"platforms":101,"lastReleaseTime":103,"downloadCount":104,"description":105},"objective-see","LuLu",103010090,"Objective-C",[],13487,11327812,"v4.5.7",[102],"mac","2026-11-02T13:57:33Z",2993,"A free and open-source macOS firewall designed to intercept and monitor network connections, protecting user privacy.",{"owner":107,"repo":108,"repoId":109,"category":51,"subgroup":52,"language":19,"tags":110,"starCount":129,"ownerUid":130,"latestTag":131,"platforms":132,"lastReleaseTime":133,"downloadCount":134,"description":135},"Aetherinox","csf-firewall",811376114,[111,112,113,114,115,116,117,108,118,119,120,121,45,122,123,124,125,126,127,128],"blocklist","blocklists","configserver","configserver-firewall","configserver-security-firewall","cpanel","csf","cwp","cyberpanel","directadmin","docker","interworx","ipset","ipset-lists","openvpn","vestacp","webmin","whmcs",376,118329232,"15.10",[88],"2026-02-28T01:08:20Z",33962,"A community-maintained fork of ConfigServer Security & Firewall (CSF) — a robust Linux iptables\u002Fnftables firewall with a free ipset blocklist service.",{"description":137,"readmeHtml":138},"A firewall concealment tool implementing Single Packet Authorization (SPA), which grants access to services hidden behind default-drop firewall policies using a single encrypted, non-replayable, and HMAC-authenticated packet.","\u003Ch2 id=\"project-overview\">Project Overview\u003C\u002Fh2>\u003Cp>fwknop implements an authorization scheme known as Single Packet Authorization (SPA) for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired access to a service that is hidden behind a firewall in a default-drop filtering stance.\u003C\u002Fp>\n\u003Ch2 id=\"key-features\">Key Features\u003C\u002Fh2>\u003Cul>\n\u003Cli>\u003Cstrong>Single Packet Authorization (SPA)\u003C\u002Fstrong>: Next-generation Port Knocking\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Replay attack protection\u003C\u002Fstrong>: SPA prevents replay attacks via encryption and HMAC authentication\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Service concealment\u003C\u002Fstrong>: Services hidden behind default-drop firewall policies, invisible to Nmap scans\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multi-firewall support\u003C\u002Fstrong>: Supports iptables, firewalld, PF, and ipfw across Linux, OpenBSD, FreeBSD, and macOS\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Custom script support\u003C\u002Fstrong>: Extensible with ipset, nftables, and other custom scripts\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Encryption options\u003C\u002Fstrong>: Supports Rijndael block cipher and GnuPG asymmetric encryption\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch2 id=\"target-audience\">Target Audience\u003C\u002Fh2>\u003Cul>\n\u003Cli>Security administrators who need to protect critical services like SSH from scanning\u003C\u002Fli>\n\u003Cli>System administrators concerned about zero-day vulnerabilities and unpatched code\u003C\u002Fli>\n\u003Cli>Network security researchers\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch2 id=\"quick-start\">Quick Start\u003C\u002Fh2>\u003Col>\n\u003Cli>Install fwknop (via package manager or source compilation)\u003C\u002Fli>\n\u003Cli>Configure the \u003Ccode>\u002Fetc\u002Ffwknop\u002Faccess.conf\u003C\u002Fcode> file\u003C\u002Fli>\n\u003Cli>Generate encryption and HMAC keys using the \u003Ccode>--key-gen\u003C\u002Fcode> option\u003C\u002Fli>\n\u003Cli>Send SPA packets using the \u003Ccode>fwknop\u003C\u002Fcode> client\u003C\u002Fli>\n\u003Cli>Receive and process SPA requests using the \u003Ccode>fwknopd\u003C\u002Fcode> daemon\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch2 id=\"core-advantages\">Core Advantages\u003C\u002Fh2>\u003Cul>\n\u003Cli>More secure than traditional Port Knocking with SPA\u003C\u002Fli>\n\u003Cli>Supports multiple firewalls and operating systems\u003C\u002Fli>\n\u003Cli>Encryption (Rijndael\u002FGnuPG) + HMAC dual authentication\u003C\u002Fli>\n\u003Cli>Open-source and free\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch2 id=\"system-requirements\">System Requirements\u003C\u002Fh2>\u003Cul>\n\u003Cli>OS: Linux, OpenBSD, FreeBSD, macOS\u003C\u002Fli>\n\u003Cli>Additional Dependencies: libpcap (for passive SPA data acquisition)\u003C\u002Fli>\n\u003C\u002Ful>\n",1794624030530]