Alternatives and similar repositories for Bypassing-Web-Application-Firewalls

Users that are interested in Bypassing-Web-Application-Firewalls are comparing it to the libraries listed below

• codewatchorg / sqlipy
  SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.
  ☆255Updated 2 weeks ago
• Varbaek / xsser
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆425Updated 5 years ago
• nccgroup / shocker
  A tool to find and exploit servers vulnerable to Shellshock
  ☆333Updated 2 years ago
• hvqzao / liffy
  Local File Inclusion Exploitation Tool (mirror)
  ☆127Updated 8 years ago
• bugbountyforum / XSS-Radar
  ☆325Updated 7 years ago
• pathetiq / BurpSmartBuster
  A Burp Suite content discovery plugin that add the smart into the Buster!
  ☆383Updated 4 years ago
• AonCyberLabs / xxe-recursive-download
  ☆231Updated 9 years ago
• cheetz / sslScrape
  SSLScrape | A scanning tool for scaping hostnames from SSL certificates.
  ☆332Updated 4 years ago
• h3xstream / http-script-generator
  ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
  ☆291Updated 2 years ago
• appsecco / vulnerable-apps
  ☆218Updated 3 years ago
• IFGHou / wapiti
  A web-application vulnerability scanner
  ☆117Updated 4 years ago
• wafpassproject / wafpass
  Analysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF.
  ☆221Updated last year
• trietptm / SQL-Injection-Payloads
  SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...
  ☆232Updated 5 years ago
• mazen160 / struts-pwn_CVE-2018-11776
  An exploit for Apache Struts CVE-2018-11776
  ☆302Updated 6 years ago
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆593Updated 4 years ago
• Plazmaz / Sublist3r
  Fast subdomains enumeration tool for penetration testers
  ☆117Updated 6 years ago
• s1kr10s / Apache-Struts-v4
  ☆206Updated 4 years ago
• RhinoSecurityLabs / SleuthQL
  Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.
  ☆469Updated 5 years ago
• Leviathan36 / trigmap
  A wrapper for Nmap to quickly run network scans
  ☆147Updated 4 years ago
• 003random / 003Recon
  Some tools to automate recon - 003random
  ☆294Updated 7 years ago
• ONsec-Lab / scripts
  Utils
  ☆267Updated 9 years ago
• cujanovic / Content-Bruteforcing-Wordlist
  Wordlist for content(directory) bruteforce discovering with Burp or dirsearch
  ☆214Updated 7 months ago
• reider-roque / linpostexp
  Linux post exploitation enumeration and exploit checking tools
  ☆180Updated 5 years ago
• ChrisTruncer / PenTestScripts
  Scripts that are useful for me on pen tests
  ☆530Updated 2 years ago
• 0xR0 / shellver
  Reverse Shell Cheat Sheet TooL
  ☆296Updated 5 years ago
• yassineaboukir / CVE-2018-0296
  Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.
  ☆203Updated last year
• redhuntlabs / BurpSuite-Asset_Discover
  Burp Suite extension to discover assets from HTTP response.
  ☆226Updated 4 months ago
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆536Updated 4 years ago
• ankh2054 / windows-pentest
  Windows Pentest Scripts
  ☆231Updated 7 years ago
• nashcontrol / bounty-monitor
  Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains …
  ☆219Updated 2 years ago