Alternatives and similar repositories for Bypassing-Web-Application-Firewalls

Users that are interested in Bypassing-Web-Application-Firewalls are comparing it to the libraries listed below

• codewatchorg / sqlipy
  SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.
  ☆259Updated 2 months ago
• s1kr10s / Apache-Struts-v4
  ☆207Updated 4 years ago
• Varbaek / xsser
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆426Updated 5 years ago
• trietptm / SQL-Injection-Payloads
  SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...
  ☆232Updated 5 years ago
• 0xR0 / shellver
  Reverse Shell Cheat Sheet TooL
  ☆296Updated 5 years ago
• AonCyberLabs / xxe-recursive-download
  ☆232Updated 9 years ago
• pavanw3b / sh00t
  Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and…
  ☆275Updated 11 months ago
• appsecco / vulnerable-apps
  ☆219Updated 3 years ago
• h3xstream / http-script-generator
  ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
  ☆291Updated 2 years ago
• NetSPI / JavaSerialKiller
  Burp extension to perform Java Deserialization Attacks
  ☆212Updated last year
• mazen160 / struts-pwn_CVE-2018-11776
  An exploit for Apache Struts CVE-2018-11776
  ☆302Updated 6 years ago
• belane / linux-soft-exploit-suggester
  Search Exploitable Software on Linux
  ☆230Updated 2 years ago
• davevs / dvxte
  Damn Vulnerable eXtensive Training Environment
  ☆105Updated 3 years ago
• wafpassproject / wafpass
  Analysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF.
  ☆222Updated last year
• danTaler / detectionString
  list of sql-injection and XSS strings
  ☆115Updated 9 years ago
• incredibleindishell / sqlite-lab
  This code is vulnerable to SQL Injection and having SQLite database. For SQLite database, SQL Injection payloads are different so it is f…
  ☆160Updated 3 years ago
• devsecboy / DomainRecon
  Based on URL and Organization Name, collect the IP Ranges, subdomains using various tools like Amass, subfinder, etc.. And check for upho…
  ☆158Updated last year
• yassineaboukir / CVE-2018-0296
  Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.
  ☆203Updated last year
• 0ang3el / EasyCSRF
  ☆162Updated 7 years ago
• bitvijays / Pentest-Scripts
  Github for the scripts utilised during Penetration test
  ☆235Updated 8 years ago
• hook-s3c / CVE-2018-11776-Python-PoC
  Working Python test and PoC for CVE-2018-11776, includes Docker lab
  ☆125Updated 6 years ago
• Meatballs1 / burp-extensions
  Burp Suite Extensions
  ☆128Updated 12 years ago
• nccgroup / shocker
  A tool to find and exploit servers vulnerable to Shellshock
  ☆333Updated 2 years ago
• pathetiq / BurpSmartBuster
  A Burp Suite content discovery plugin that add the smart into the Buster!
  ☆381Updated 4 years ago
• hvqzao / liffy
  Local File Inclusion Exploitation Tool (mirror)
  ☆128Updated 8 years ago
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆594Updated 4 years ago
• IFGHou / wapiti
  A web-application vulnerability scanner
  ☆118Updated 4 years ago
• reider-roque / linpostexp
  Linux post exploitation enumeration and exploit checking tools
  ☆181Updated 5 years ago
• cyberheartmi9 / CVE-2017-12617
  Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution
  ☆391Updated 7 years ago
• cheetz / THP-ChatSupportSystem
  The Hacker Playbook 3 - Web Commands
  ☆84Updated 7 years ago