waf-bypass

There are 7 repositories under waf-bypass topic.

0xInfection / Awesome-WAF
🔥 Web-application firewalls (WAFs) from security standpoint.
awesome awesome-list bypass-waf firewall infosec security waf waf-bypass waf-detection waf-fingerprints waf-test waf-testing web-application-firewall
Language:Python 5962
devploit / nomore403
Tool to bypass 403/40X response codes.
waf-bypass pentesting websec bugbounty ctf 403 403-bypass bypass
Language:Go 964
0xacb / recollapse
REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications
fuzzing normalization regex waf-bypass hacking-tools
Language:Python 850
devploit / XORpass
Encoder to bypass WAF filters using XOR operations.
php xor websec pentesting waf-bypass bugbounty
Language:Python 247
blacklanternsecurity / TREVORproxy
A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses!
socks socks5 proxy proxy-server waf-bypass password-spray ip-address trevor python hack-tool
Language:Python 177
gagaltotal / Bypass-WAF-SQLMAP
Bypass WAF SQL Injection SQLMAP
sql sqlinjection website php mysql python sqlmap sql-injection vulnerability waf-bypass
141
1337r0j4n / php-backdoors
php backdoors | php webshells ( collection )
bypass-webshells collection malicious-code php php-backdoors php-shells php-web-shells shells waf-bypass web webshells website-backdoors
Language:PHP 123
Xib3rR4dAr / filter-var-sqli
Bypassing FILTER_SANITIZE_EMAIL & FILTER_VALIDATE_EMAIL filters in filter_var for SQL Injection ( xD )
sql-injection bug-bounty penetration-testing waf-bypass
30
Zeyad-Azima / WAF_Bypass_Guide
Guide For WAF Bypass Techniques
web website waf wafw00f waf-detection waf-bypass firewall bypass
26
r3kind1e / Log4Shell-obfuscated-payloads-generator
Generate primary obfuscated or secondary obfuscated CVE-2021-44228 or CVE-2021-45046 payloads to evade WAF detection.
cve-2021-44228 cve-2021-45046 log4j log4shell vulnerability-research waf-bypass
Language:Python 20
papocch10 / encode-me
Payload encoder for bypass WAF
payload-encoder waf waf-bypass
Language:Go 16
fijimunkii / shodan-waf-bypass
Firewall bypass script based on shodan search results
waf firewall bypass waf-bypass firewall-bypass shodan
Language:JavaScript 14
hupe1980 / scan4log4shell
Scanner to send specially crafted requests and catch callbacks of systems that are impacted by log4j log4shell vulnerability and to detect vulnerable log4j versions on your local file-system
cve-2021-44228 log4j log4shell rce scanner vulnerability waf-bypass red-team blue-team fuzzing cve-2021-45046 form-detection auth dns cve-2021-45105
Language:Go 13
kh4sh3i / WAF-Bypass
🔥 Web application firewalls (WAF) bypass
bypass bypassing exploit owasp pentest waf waf-bypass wafw00f xss firewall security waf-bypass-tool waf-bypasser waf-detection hack
12
e-m3din4 / domain-a-tricks
A Domain-Recon Automated Tool.
bruteforce cloudflare dns dns-records domain file-parser header origin-ip penetration-testing reverse-proxy subdomain-scanner waf waf-bypass waf-detection webapp whois
Language:Shell 10
e-m3din4 / the-nurse
A WAF Bypass tool assisting in the use of SQLMap Tampers list according to specific WAF vendors.
bash firewall injections sqlmap tamper waf-bypass webapp
Language:Shell 9
miniact / mangyaWAF
A Machine Learning Based Web Application firewall
ai bugbounty cybersecurity machine-learning payload pyhton3 waf waf-bypass xss
Language:Jupyter Notebook 8
thadriss / Vulnerability_Scanner
This script is a powerful and efficient tool for identifying vulnerabilities in web applications. Its multi-threading, fingerprinting, exploit verification, WAF bypass and logging features make it a valuable addition to any security tester's toolkit.
brute-force-attacks python scanner sql-injection-attacks vulnerability-scanners waf-bypass fingerprinting logging npm
Language:Python 2
Pyenb / CloudCheck
Checks if a given website, or list of websites, use the cloudflare service or not.
cloud cloudflare python python3 security security-automation security-tools waf waf-bypass
Language:Python 1
n1ghtf4l1 / jubilant-robot-hacker
Collecting flags by evading, poisoning, stealing, and fooling AI/ML.
capture-the-flag clustering dimensionality-reduction image-classification image-processing kaggle-competition machine-learning embeddings evasion-attack tensorflow-keras tsne waf-bypass pca-reduction
Language:Jupyter Notebook 0