Alternatives and similar repositories for waf-bypass

Users that are interested in waf-bypass are comparing it to the libraries listed below

• si9int / Subra
  A Web-UI for subdomain enumeration (subfinder)
  ☆54Updated 5 years ago
• arbazkiraak / web-cache-deception-checker
  Tool is to check for Cache Deception Attack Both For Authenticated and UnAuthenticated Pages
  ☆44Updated 3 years ago
• mikaelkall / Exploits
  Exploits developed by Mikael Kall
  ☆47Updated 2 years ago
• synacktiv / burp-jq
  Burp extension to filter JSON on the fly with JQ queries in the HTTP message viewer.
  ☆47Updated 4 years ago
• Sy3Omda / burp-bounty
  Burp Bounty profiles
  ☆83Updated 3 years ago
• Sjord / jwtdemo
  Practice hacking JWT tokens
  ☆115Updated 2 years ago
• ba0zi / Spring-Boot-Actuator-Exploit
  Spring Boot Actuator (jolokia) XXE/RCE
  ☆22Updated 6 years ago
• BlackFan / WEB-INF-dict
  List of configuration files from WEB-INF and META-INF for use in Unvalidated Forwards and JSP Include vulnerabilities.
  ☆82Updated 7 years ago
• gquere / CVE-2020-7931
  Hacking Artifactory with server side template injection
  ☆51Updated 5 years ago
• ghsec / BBProfiles
  Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that improve an active and passive scanner by yourself. This …
  ☆61Updated 3 years ago
• Team-Firebugs / Burp-LFI-tests
  Fuzzing for LFI using Burpsuite
  ☆63Updated 8 years ago
• arbazkiraak / LinksDumper
  Extract (links/possible endpoints) from responses & filter them via decoding/sorting
  ☆91Updated 5 years ago
• RandomRobbieBF / grafana-ssrf
  Authenticated SSRF in Grafana
  ☆82Updated last year
• mirfansulaiman / CustomHeader
  This Burp Suite extension allows you to customize header with put a new header into HTTP REQUEST BurpSuite (Scanner, Intruder, Repeater, …
  ☆53Updated 2 years ago
• p3n73st3r / Ghazi
  Ghazi is a BurpSuite Plugins For Testing various PayLoads Like "XSS,SQLi,SSTI,SSRF,RCE and LFI" through Different tabs , Where Each Tab W…
  ☆110Updated 6 years ago
• pimps / CVE-2017-1000486
  Primefaces <= 5.2.21, 5.3.8 or 6.0 - Remote Code Execution Exploit
  ☆91Updated last year
• vah13 / SAP_exploit
  Here you can get full exploit for SAP NetWeaver AS JAVA
  ☆76Updated 7 years ago
• PortSwigger / nginx-alias-traversal
  Burp extension to detect alias traversal via NGINX misconfiguration at scale.
  ☆54Updated 3 years ago
• random-robbie / ssrf-finder
  Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.
  ☆109Updated 3 years ago
• B1anda0 / CVE-2020-17519
  Apache Flink 目录遍历漏洞批量检测 (CVE-2020-17519)
  ☆48Updated 4 years ago
• masahiro331 / CVE-2020-9484
  ☆127Updated 3 years ago
• osamahamad / CVE-2020-5410-POC
  CVE-2020-5410 Spring Cloud Config directory traversal vulnerability
  ☆31Updated 5 years ago
• kiranreddyrebel / PostMessage_Fuzz_Tool
  #BugBounty #BugBounty Tools #WebDeveloper Tool
  ☆38Updated 2 months ago
• parsiya / Parsia-Clone
  Clone me and get your own authentic Parsia-Clone today.
  ☆45Updated 7 months ago
• IdealDreamLast / CVE-2020-9484
  用Kali 2.0复现Apache Tomcat Session反序列化代码执行漏洞
  ☆53Updated 5 years ago
• pimps / gopher-tomcat-deployer
  Gopher Tomcat Deployer
  ☆48Updated 6 years ago
• SafeBreach-Labs / HRS
  ☆50Updated 4 years ago
• theblackturtle / wildcheck
  A simple tool to detect wildcards domain based on Amass's wildcards detector.
  ☆65Updated 4 years ago
• spaceraccoon / spring-boot-actuator-h2-rce
  Sample Spring Boot App Demonstrating RCE via Exposed env Actuator and H2 Database
  ☆107Updated 5 years ago
• InitRoot / BurpSQLTruncSanner
  Messy BurpSuite plugin for SQL Truncation vulnerabilities.
  ☆63Updated 5 years ago