Alternatives and similar repositories for waf-bypass:

Users that are interested in waf-bypass are comparing it to the libraries listed below

• si9int / Subra
  A Web-UI for subdomain enumeration (subfinder)
  ☆54Updated 4 years ago
• BlackFan / WEB-INF-dict
  List of configuration files from WEB-INF and META-INF for use in Unvalidated Forwards and JSP Include vulnerabilities.
  ☆82Updated 7 years ago
• InitRoot / BurpSQLTruncSanner
  Messy BurpSuite plugin for SQL Truncation vulnerabilities.
  ☆64Updated 5 years ago
• synacktiv / burp-jq
  Burp extension to filter JSON on the fly with JQ queries in the HTTP message viewer.
  ☆47Updated 4 years ago
• Sy3Omda / burp-bounty
  Burp Bounty profiles
  ☆82Updated 3 years ago
• RandomRobbieBF / grafana-ssrf
  Authenticated SSRF in Grafana
  ☆82Updated 10 months ago
• arbazkiraak / BurpBLH
  Broken Link Hijacking Burp Extension
  ☆57Updated 5 years ago
• Team-Firebugs / Burp-LFI-tests
  Fuzzing for LFI using Burpsuite
  ☆62Updated 8 years ago
• SafeBreach-Labs / HRS
  ☆50Updated 4 years ago
• theblackturtle / wildcheck
  A simple tool to detect wildcards domain based on Amass's wildcards detector.
  ☆64Updated 4 years ago
• mikaelkall / Exploits
  Exploits developed by Mikael Kall
  ☆47Updated last year
• PortSwigger / bypass-waf
  Add headers to all Burp requests to bypass some WAF products
  ☆40Updated last year
• random-robbie / ssrf-finder
  Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.
  ☆109Updated 3 years ago
• spaceraccoon / spring-boot-actuator-h2-rce
  Sample Spring Boot App Demonstrating RCE via Exposed env Actuator and H2 Database
  ☆106Updated 5 years ago
• ghsec / BBProfiles
  Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that improve an active and passive scanner by yourself. This …
  ☆60Updated 3 years ago
• AssassinUKG / CVE-2021-22204
  ☆27Updated 3 years ago
• arbazkiraak / web-cache-deception-checker
  Tool is to check for Cache Deception Attack Both For Authenticated and UnAuthenticated Pages
  ☆44Updated 3 years ago
• Sjord / jwtdemo
  Practice hacking JWT tokens
  ☆114Updated 2 years ago
• DrunkenShells / Disclosures
  Public Disclosures
  ☆89Updated 3 years ago
• arbazkiraak / LinksDumper
  Extract (links/possible endpoints) from responses & filter them via decoding/sorting
  ☆90Updated 5 years ago
• Universe1122 / smuggler.py
  HTTP request smuggling tools
  ☆18Updated 4 years ago
• alita-ido / PHP-File-Writer
  ☆25Updated 4 years ago
• topavankumarj / CORS-Exploit-Script
  ☆40Updated 2 years ago
• Mad-robot / wordpress-exploits
  All known and unknown public POC's for wordpress themes and plugins
  ☆78Updated 3 years ago
• Gilzy / 403Bypasser
  ☆55Updated 2 years ago
• t0kx / exploit-CVE-2016-9920
  Roundcube 1.0.0 <= 1.2.2 Remote Code Execution exploit and vulnerable container
  ☆47Updated last year
• jas502n / CVE-2019-11581
  Atlassian JIRA Template injection vulnerability RCE
  ☆93Updated 5 years ago
• kiranreddyrebel / PostMessage_Fuzz_Tool
  #BugBounty #BugBounty Tools #WebDeveloper Tool
  ☆37Updated 5 years ago
• osamahamad / CVE-2020-5410-POC
  CVE-2020-5410 Spring Cloud Config directory traversal vulnerability
  ☆31Updated 4 years ago
• PortSwigger / json-beautifier
  JSON Beautifier for Burp written in Java
  ☆39Updated 5 years ago