Add headers to all Burp requests to bypass some WAF products
☆44Nov 30, 2023Updated 2 years ago
Alternatives and similar repositories for bypass-waf
Users that are interested in bypass-waf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bruteforcing from various scanner output - Automatically attempts default creds on found services.☆16Mar 10, 2025Updated last year
- A Zeek package to detect CVE-2021-42292, a Microsoft Excel local privilege escalation exploit.☆19Nov 11, 2021Updated 4 years ago
- Utilities for creating Burp Suite Extensions.☆22Oct 31, 2024Updated 2 years ago
- ☆17May 3, 2021Updated 5 years ago
- A malicious .cab creation tool for CVE-2021-40444☆11Sep 12, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Pipe different tools with google dork Scanner☆57Jun 25, 2020Updated 6 years ago
- Collection of offensive tools targeting Microsoft Azure☆11Jun 9, 2022Updated 4 years ago
- Mimikatz built as a static library.☆12Feb 9, 2022Updated 4 years ago
- A locally hosted page for cheat sheets. Currently being used for reverse engineering and hosted in labs so I can limit or forgo (lock dow…☆14Mar 19, 2026Updated 7 months ago
- Manage the metasploit framework database☆16Nov 8, 2020Updated 5 years ago
- A BurpSuite extension for beautifying .NET message parameters and hiding some of the extra clutter that comes with .NET web apps (i.e. __…☆10Feb 13, 2017Updated 9 years ago
- Lambda-Proxy creates an HTTP proxy listening on localhost port 8082. When it receives an HTTP POST request with a very specific structure…☆37Jan 11, 2019Updated 7 years ago
- ☆20Oct 5, 2020Updated 6 years ago
- ☆25Mar 21, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Login hunter of default credentials for administrative web interfaces leveraging NNdefaccts dataset.☆338Nov 21, 2020Updated 5 years ago
- Automagically decode DNS Exfiltration queries to convert Blind RCE into proper RCE via Burp Collaborator☆21Jan 7, 2026Updated 9 months ago
- Analysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF.☆222Oct 16, 2023Updated 3 years ago
- ☆19Nov 18, 2020Updated 5 years ago
- Links or additional data to some researches☆13May 24, 2019Updated 7 years ago
- A Burp extension to show the Collaborator client in a tab☆36Dec 23, 2022Updated 3 years ago
- websocket-connection-smuggler☆70Jan 22, 2020Updated 6 years ago
- ☆11Jun 28, 2022Updated 4 years ago
- Burp/ZAP extension that integrate Retire.js repository to find vulnerable Javascript libraries.☆38Dec 14, 2021Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Social Engineering Toolkit☆12Jun 19, 2024Updated 2 years ago
- AWS Security Checks☆39Jan 18, 2018Updated 8 years ago
- WhatsSpy Public - Spy Tool Whatsapp☆12Aug 23, 2015Updated 11 years ago
- Burp suite extension that lets you easily copy issues☆17Apr 3, 2026Updated 6 months ago
- Status images for your dockerhub automated build (like those for travis)☆16Nov 9, 2018Updated 7 years ago
- FockCache - Minimalized Test Cache Poisoning☆111Feb 3, 2020Updated 6 years ago
- Terminate the eventlog thread to disable the windows eventlog☆21Apr 1, 2020Updated 6 years ago
- Maintaining account persistence via XSS and Oauth☆77Jan 7, 2019Updated 7 years ago
- Default plugins for Jaeles Scanner☆38Nov 5, 2020Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Collection of scanner checks missing in Burp☆31Jun 15, 2020Updated 6 years ago
- A BOF for patching AMSI, ETW and NtTraceEvent aka Sysmon using Trampolines☆12Jul 30, 2026Updated 3 months ago
- This is an OSINT tool for searching targets using the target's username☆15Oct 16, 2025Updated last year
- A secrets manager in times of crypto coins.☆11Jul 10, 2026Updated 3 months ago
- Postman Integration is an extension for burp to generate Postman collection fomat json file.☆21Sep 7, 2022Updated 4 years ago
- WS-Attacker is a modular framework for web services Security penetration testing.☆12May 16, 2019Updated 7 years ago
- ***MERGED: SEE README:*** The XCCDF to InSpec parser scans and extracts the controls defined in the DISA XCCDF STIG XML documents and con…☆13Nov 23, 2018Updated 7 years ago