Alternatives and similar repositories for waf-bypass:

Users that are interested in waf-bypass are comparing it to the libraries listed below

• si9int / Subra
  A Web-UI for subdomain enumeration (subfinder)
  ☆54Updated 4 years ago
• BlackFan / WEB-INF-dict
  List of configuration files from WEB-INF and META-INF for use in Unvalidated Forwards and JSP Include vulnerabilities.
  ☆82Updated 7 years ago
• Sy3Omda / burp-bounty
  Burp Bounty profiles
  ☆82Updated 3 years ago
• Team-Firebugs / Burp-LFI-tests
  Fuzzing for LFI using Burpsuite
  ☆62Updated 8 years ago
• mikaelkall / Exploits
  Exploits developed by Mikael Kall
  ☆47Updated last year
• synacktiv / burp-jq
  Burp extension to filter JSON on the fly with JQ queries in the HTTP message viewer.
  ☆47Updated 4 years ago
• arbazkiraak / LinksDumper
  Extract (links/possible endpoints) from responses & filter them via decoding/sorting
  ☆90Updated 5 years ago
• alita-ido / PHP-File-Writer
  ☆25Updated 4 years ago
• InitRoot / BurpSQLTruncSanner
  Messy BurpSuite plugin for SQL Truncation vulnerabilities.
  ☆64Updated 5 years ago
• PortSwigger / bypass-waf
  Add headers to all Burp requests to bypass some WAF products
  ☆39Updated last year
• random-robbie / ssrf-finder
  Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.
  ☆107Updated 3 years ago
• Universe1122 / smuggler.py
  HTTP request smuggling tools
  ☆18Updated 4 years ago
• mpgn / CVE-2019-7609
  RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer
  ☆55Updated 5 years ago
• RandomRobbieBF / grafana-ssrf
  Authenticated SSRF in Grafana
  ☆80Updated 9 months ago
• arbazkiraak / BurpBLH
  Broken Link Hijacking Burp Extension
  ☆57Updated 5 years ago
• Sjord / jwtdemo
  Practice hacking JWT tokens
  ☆114Updated 2 years ago
• theblackturtle / wildcheck
  A simple tool to detect wildcards domain based on Amass's wildcards detector.
  ☆62Updated 4 years ago
• AssassinUKG / CVE-2021-22204
  ☆27Updated 3 years ago
• dreadlocked / SSRFmap
  Simple Server Side Request Forgery services enumeration tool.
  ☆55Updated 6 years ago
• Gilzy / 403Bypasser
  ☆55Updated 2 years ago
• 0xbharath / assets-from-spf
  A Python script to parse net blocks & domain names from SPF record
  ☆83Updated 4 years ago
• duckstroms / xss-reflector
  XSS reflector vulnerabilities exploitation extended.
  ☆27Updated 3 years ago
• ghsec / BBProfiles
  Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that improve an active and passive scanner by yourself. This …
  ☆60Updated 3 years ago
• PortSwigger / serialization-examples
  ☆39Updated last year
• guilhermesilvame / security
  Collection of scripts to test your website against vulnerabilities.
  ☆18Updated last year
• Static-Flow / BurpSuiteAutoCompletion
  This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.
  ☆164Updated 4 years ago
• 0xspade / XSS-Gif-Payload
  A XSS Payload in a gif file
  ☆45Updated 8 years ago
• vavkamil / XSSwagger
  A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks
  ☆58Updated 5 years ago
• Mad-robot / wordpress-exploits
  All known and unknown public POC's for wordpress themes and plugins
  ☆78Updated 3 years ago
• pimps / gopher-tomcat-deployer
  Gopher Tomcat Deployer
  ☆48Updated 6 years ago