httpsentry   
http://www.httpsentry.com

HttpSentry <a href="http://www.httpsentry.com">(http://www.httpsentry.com)</a> is a free IIS Filter to detect hacker attacks. It prevents common security problems such as SQL injection, Directroy traversal and many more. it also supports URL rewrite and Server masking. HttpSentry is also an effort to shift the burden of input validation and other security concerns off web application developers. Traditional network firewalls cannot protect web applications. Port 80 is wide open and according to Gartner group, 75% of cyber attacks and internet security violations are generated through Internet Applications. HttpSentry focuses on easy of use. The installation comes with only one dll and one configuration file. All the basic rules to fight common problems are already built in and can be easily disabled via the configuration file if necessary. Features of HttpSentry are: 1. A set of built in rules for detecting common invasion techniques such as Directory traversal, SQL injection, Shellcode attack, URL split, Serverside include attack, OS command execution, Buffer overflow and Code red attack. 2. Ability to allow/disallow URL which contains certain meta characters. Most of the meta characters do not form legitimate input for web applications and are mostly used by hackers. 3. Selective filters allow user to specify header locations, such as client IP, to filter on. 4. Custom filters allow user to define any form of regular expression based rules. 5. User can choose from three forms of actions on each individual rule. It could be deny of access, redirect to some other web page, or/and log the request to a file. 6.URL rewrite manipulates URL base on regular expressions and allows user to redirect web pages. 7.Server mask protects web server identity by changing the "Server" field in the response header.

HTTP Analyzer   
http://www.ieinspector.com

HTTP Analyzer is a utility that allows you to capture HTTP/HTTPS traffic in real-time. It displays a wide range of information, including Header, Content, Cookies, Query Strings, Post data, Request and Response Stream, redirection URLs and more. It also provides cache information and session clearing, as well as HTTP status code information and several filtering options. A useful developer tool for performance analysis, debugging and diagnostics. HTTPS is available if the application uses the Microsoft WININET API(ex.ie, outlook) or Mozilla NSS API(ex. firefox, netscape). HTTP Analyzer includes two forms---Standard Exe and IE Add-in. Standard EXE :Standard windows EXE application. It can capture any process's HTTP/HTTPS traffic in current user session.It has the ability to capture HTTP information in Windows applications without launching them from HTTP Analyzer. HTTPS is available if the application uses the Microsoft WININET API. IE Add-in: An IE Add-in that integrates into the lower part of your IE browser window and can be opened/closed from the IE toolbar.It can only capture HTTP/HTTPS traffic of current IE process.

MetaCompress   
http://www.metamatica.com

MetaCompress is an ISAPI filter for IIS (Internet Information Server). Most web browsers, including the most popular Microsoft Internet Explorer, can access compressed content of web sites as well as ordinary HTML pages. If a site packed with MetaCompress is accessed by a client browser which supports compressed content, MetaCompress packs text on the fly. Otherwise, MetaCompress leaves the required content uncompressed. This feature gives you an incontestable advantage: the text content of your site loads faster. This, in turn, increases your site's accessibility for users who have a slow dial up connection and speeds up the loading of pages on your site in general. MetaCompress advantages: - Increases the pages loading speed 3 - 5 times - Reduces Internet traffic 20 - 60% (depending on the site content) - Supports compression using HTTP/1.0 protocol - Create and analyze compression activities logs - Easily configurable. Ability to change settings without restarting. - Simplified install and un-install process This filter is most useful if your site contains a lot of text information. For example: - forums or web mail clients - news portals, documentation sites, virtual libraries - article catalogs, etc. MetaCompress is designed to be used in a web server environment. Supported Operating Systems: - Windows 2000 Professional - Windows 2000 Server - Windows XP Professional - Windows Server 2003 Additional Requirements: Internet Information Server (IIS) 4, 5, 6.

IIS Accelerator   
http://www.vigos.com

ISAPI filter for high performance HTTP Compression and Content Optimization, Whitespace Removing, Image Optimization, Image Re-compression and much more. Makes Web sites up to 4-times faster. Available for all IIS Web servers.