Alternatives and similar repositories for Bypassing-Web-Application-Firewalls

Users that are interested in Bypassing-Web-Application-Firewalls are comparing it to the libraries listed below

• trietptm / SQL-Injection-Payloads
  SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...
  ☆231Updated 5 years ago
• codewatchorg / sqlipy
  SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.
  ☆254Updated 10 months ago
• h3xstream / http-script-generator
  ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
  ☆290Updated 2 years ago
• pathetiq / BurpSmartBuster
  A Burp Suite content discovery plugin that add the smart into the Buster!
  ☆383Updated 4 years ago
• Varbaek / xsser
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆425Updated 5 years ago
• nccgroup / shocker
  A tool to find and exploit servers vulnerable to Shellshock
  ☆333Updated 2 years ago
• hvqzao / liffy
  Local File Inclusion Exploitation Tool (mirror)
  ☆125Updated 8 years ago
• belane / linux-soft-exploit-suggester
  Search Exploitable Software on Linux
  ☆227Updated 2 years ago
• AonCyberLabs / xxe-recursive-download
  ☆231Updated 9 years ago
• 0xR0 / shellver
  Reverse Shell Cheat Sheet TooL
  ☆296Updated 5 years ago
• RhinoSecurityLabs / SleuthQL
  Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.
  ☆469Updated 5 years ago
• cujanovic / Content-Bruteforcing-Wordlist
  Wordlist for content(directory) bruteforce discovering with Burp or dirsearch
  ☆214Updated 7 months ago
• redhuntlabs / BurpSuite-Asset_Discover
  Burp Suite extension to discover assets from HTTP response.
  ☆225Updated 3 months ago
• devsecboy / DomainRecon
  Based on URL and Organization Name, collect the IP Ranges, subdomains using various tools like Amass, subfinder, etc.. And check for upho…
  ☆157Updated last year
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆592Updated 3 years ago
• ONsec-Lab / scripts
  Utils
  ☆267Updated 9 years ago
• nashcontrol / bounty-monitor
  Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains …
  ☆219Updated 2 years ago
• FSecureLABS / dref
  DNS Rebinding Exploitation Framework
  ☆488Updated 4 years ago
• cheetz / sslScrape
  SSLScrape | A scanning tool for scaping hostnames from SSL certificates.
  ☆332Updated 4 years ago
• ewilded / psychoPATH
  psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-s…
  ☆275Updated 4 years ago
• wafpassproject / wafpass
  Analysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF.
  ☆221Updated last year
• appsecco / vulnerable-apps
  ☆218Updated 3 years ago
• IFGHou / wapiti
  A web-application vulnerability scanner
  ☆117Updated 4 years ago
• PortSwigger / command-injection-attacker
  SHELLING - a comprehensive OS command injection payload generator
  ☆108Updated 5 years ago
• s1kr10s / Apache-Struts-v4
  ☆206Updated 4 years ago
• EdOverflow / megplus
  Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]
  ☆306Updated 6 years ago
• Plazmaz / Sublist3r
  Fast subdomains enumeration tool for penetration testers
  ☆117Updated 6 years ago
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆535Updated 4 years ago
• 003random / 003Recon
  Some tools to automate recon - 003random
  ☆294Updated 6 years ago
• evilcos / xss.swf
  a tiny tool for swf hacking, just browse it:)
  ☆243Updated 12 years ago