fastly / wafefficacy
Measures the effectiveness of your Web Application Firewall (WAF)
☆76Updated last year
Alternatives and similar repositories for wafefficacy:
Users that are interested in wafefficacy are comparing it to the libraries listed below
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆138Updated 3 years ago
- openrisk is a tool that generates a risk score based on the results of a Nuclei scan.☆167Updated last week
- This tool shows the result of crt.sh☆88Updated 2 years ago
- WAF bypass PoC☆46Updated last year
- FastCVE - fast, rich and API-based search for CVE and more (CPE, CWE, CAPEC)☆41Updated 2 weeks ago
- Tools to assess DNS security.☆151Updated 10 months ago
- Application and Service Fingerprinting☆131Updated 2 years ago
- Search for vulnerabilities and exposures while filtering based on age, keywords, and other parameters.☆123Updated 2 years ago
- yataf extracts secrets and paths from files or urls - its best used against javascript files☆51Updated 4 months ago
- ☆110Updated last year
- Go fish for AWS EIPs☆46Updated 3 years ago
- ASN target organization IP range attack surface mapping for reconnaissance, fast and lightweight☆204Updated 2 years ago
- Fast and lightweight Web Application Firewall Fingerprinting tool☆62Updated last month
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆101Updated 2 weeks ago
- truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)☆113Updated last year
- Running nuclei Continuously☆55Updated 2 years ago
- goverview - Get an overview of the list of URLs☆144Updated last year
- Weaponizing Live CT logs for automated monitoring of assets☆132Updated 3 years ago
- Payloads that can be used for testing web application firewalls☆40Updated 2 years ago
- 🏵 Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addi…☆82Updated 2 months ago
- A simple remote scanner for Atlassian Jira☆120Updated 2 years ago
- Assorted tools for security-related task for git repositories☆59Updated 2 years ago
- Tools to assess the DNS security of web applications☆127Updated 2 years ago
- My custom semgrep rules☆20Updated 4 years ago
- Presentation presented at DEFCON 27 PHV☆26Updated 5 years ago
- ☆69Updated 3 years ago
- An Evil OIDC Server☆51Updated 2 years ago
- Cloud agnostic IAM permissions enumerator☆139Updated 5 months ago
- A custom built DNS bruteforcer with multi-threading, and handling of bad resolvers.☆58Updated 2 years ago
- Dependency Combobulator☆89Updated last year