Alternatives and similar repositories for Bypassing-Web-Application-Firewalls:

Users that are interested in Bypassing-Web-Application-Firewalls are comparing it to the libraries listed below

• codewatchorg / sqlipy
  SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.
  ☆254Updated 9 months ago
• pathetiq / BurpSmartBuster
  A Burp Suite content discovery plugin that add the smart into the Buster!
  ☆383Updated 4 years ago
• hvqzao / liffy
  Local File Inclusion Exploitation Tool (mirror)
  ☆123Updated 8 years ago
• Varbaek / xsser
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆424Updated 5 years ago
• h3xstream / http-script-generator
  ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
  ☆290Updated last year
• nccgroup / shocker
  A tool to find and exploit servers vulnerable to Shellshock
  ☆332Updated last year
• s1kr10s / Apache-Struts-v4
  ☆206Updated 3 years ago
• 003random / 003Recon
  Some tools to automate recon - 003random
  ☆295Updated 6 years ago
• cujanovic / Content-Bruteforcing-Wordlist
  Wordlist for content(directory) bruteforce discovering with Burp or dirsearch
  ☆214Updated 5 months ago
• bugbountyforum / XSS-Radar
  ☆326Updated 7 years ago
• nashcontrol / bounty-monitor
  Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains …
  ☆220Updated 2 years ago
• wafpassproject / wafpass
  Analysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF.
  ☆220Updated last year
• SolomonSklash / chomp-scan
  A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.
  ☆397Updated 4 years ago
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆593Updated 3 years ago
• orangetw / Tiny-URL-Fuzzer
  A tiny and cute URL fuzzer
  ☆393Updated 2 years ago
• 0xR0 / shellver
  Reverse Shell Cheat Sheet TooL
  ☆293Updated 4 years ago
• 0x4D31 / burpa
  Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Applica…
  ☆481Updated 6 years ago
• redhuntlabs / BurpSuite-Asset_Discover
  Burp Suite extension to discover assets from HTTP response.
  ☆223Updated last month
• cheetz / sslScrape
  SSLScrape | A scanning tool for scaping hostnames from SSL certificates.
  ☆331Updated 3 years ago
• Plazmaz / Sublist3r
  Fast subdomains enumeration tool for penetration testers
  ☆117Updated 6 years ago
• IFGHou / wapiti
  A web-application vulnerability scanner
  ☆119Updated 4 years ago
• c0rv4x / project-black
  Pentest/BugBounty progress control with scanning modules
  ☆281Updated 4 years ago
• tijme / angularjs-csti-scanner
  Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.
  ☆311Updated 3 years ago
• SpiderLabs / Airachnid-Burp-Extension
  A Burp Extension to test applications for vulnerability to the Web Cache Deception attack
  ☆137Updated 4 years ago
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆528Updated 4 years ago
• AonCyberLabs / xxe-recursive-download
  ☆232Updated 9 years ago
• pavanw3b / sh00t
  Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and…
  ☆272Updated 6 months ago
• mazen160 / struts-pwn_CVE-2018-11776
  An exploit for Apache Struts CVE-2018-11776
  ☆301Updated 6 years ago
• yassineaboukir / CVE-2018-0296
  Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.
  ☆202Updated last year
• trietptm / SQL-Injection-Payloads
  SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...
  ☆229Updated 5 years ago