Cybrary ForgeCYBRARY / FORGE

Wallarm

v4.10Wallarm

A cloud-native WAF/WAAP that discovers API endpoints, profiles normal traffic, and blocks injection, abuse and API-specific attacks at the node. Security teams use it to see what is being attempted in production. The range models node registration, the endpoint inventory and the attack/hit feed the console shows.

Category
Runtime application protection (WAAP)
Package
wallarm-node
Runs on
Linux
Commands
wallarm-cli, addnode
Console
https://wallarm.range.local

Node registration, endpoint inventory and hits are replayed from the authored traffic model — no cloud tenant.

Install it

The scripts below install the real Wallarm package on your own machine — read them first, and run them somewhere you are allowed to change. Inside the range, one press puts the simulated package on your next machine.

Linux installer (shell script)
install-wallarm.sh
Windows installer (PowerShell)
Install-wallarm.ps1

No native Windows build. Use a Linux host in the range, or run it under WSL.

On a range machine
Add it to your kit and every machine you launch comes with it.

On Linux

Debian, Ubuntu, Kali (apt)

  1. Refresh the package lists
    sudo apt update
  2. Install Wallarm
    sudo apt install -y wallarm-node

RHEL, Fedora (dnf)

  1. Install Wallarm
    sudo dnf install -y wallarm-node

    Package names drift between distributions; search first if this one misses.

Arch (pacman)

  1. Install Wallarm
    sudo pacman -S --noconfirm wallarm-node

Alpine (apk)

  1. Install Wallarm
    sudo apk add wallarm-node

    Package names drift between distributions; search first if this one misses.

Check it worked

  1. Confirm it landed on PATH
    which wallarm-cli
  2. Check the version
    wallarm-cli --version

    The range reports 4.10.

Remove it

  1. Take it off again
    sudo apt remove --purge wallarm-node

On Windows

No native Windows build. Use a Linux host in the range, or run it under WSL.

Windows Subsystem for Linux

  1. Install a Linux userland on the Windows host
    wsl --install -d Ubuntu

    The upstream project has no native Windows build; WSL is the usual way round it.

  2. Install Wallarm inside it
    wsl sudo apt install -y wallarm-node

Inside the range

  1. Tick it on the launch screen

    Under Wallarm's category on the advanced tool shelf. A lab that depends on it locks the toggle on and says why.

  2. Or install it from a range terminal
    sudo apt install -y wallarm-node

    The simulated package manager seeds the same binaries, config and receipt the shelf toggle does.

  3. Everything here is simulated

    No software is downloaded and nothing executes — the range answers from authored fixtures.

Labs that use Wallarm

No lab locks this one on yet — tick it on the launch screen and take it into any scenario.