kh4sh3i / WAF-Bypass
🔥 Web application firewalls (WAF) bypass
☆28Updated last year
Related projects ⓘ
Alternatives and complementary repositories for WAF-Bypass
- A collection of useful lists for Penetration Testing & Bug Bounty - Content Discovery, Payloads, Variables, Sandbox Escaping, etc☆54Updated 2 months ago
- ☆55Updated 7 months ago
- ☆70Updated 4 months ago
- A powerful bash script for massive XSS scanning leveraging Brute Logic's KNOXSS API☆58Updated last month
- PoC for XSS in org.webjars:swagger-ui [3.14.2, 3.36.2]☆53Updated last year
- Here Are Some Bug Bounty Resource From Twitter☆84Updated 5 months ago
- A tool that automates the search for IDOR vulnerabilities in web apps and APIs☆50Updated 3 years ago
- This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.☆68Updated 10 months ago
- This repository contains my writeups for the labs in PortSwigger's Web Security Academy platform. Each lab writeup includes the lab's nam…☆89Updated 7 months ago
- A simple plugin to export JS files from one or multiple targets☆39Updated last year
- A basic tool to check for XSS vulnerabilities. It takes a list of URLs and checks if the parameter values appear in the response.☆27Updated 3 months ago
- Web Crawler for Identifying Entry Points☆11Updated 7 months ago
- Backup Files Wordlist Generator - generate a comprehensive list of potential backup file Wordlist based on a given list URL and backup fi…☆35Updated this week
- Parse FFUF results in GUI with option to sort based by response code , size , keyword☆86Updated 2 months ago
- Advanced CORS Header Checker Tool with Vulnerability Detection and Bypass Attempts☆56Updated last month
- A collection of solutions for every PortSwigger Academy Lab (in progress)☆88Updated 2 years ago
- Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)☆74Updated 5 months ago
- ☆47Updated 5 months ago
- A collection of Bug Bounty Tips collected from GitHub to all bug bounty hunters☆26Updated 11 months ago
- Advanced Tool To Scan And Exploit Local File Inclusion (LFI) Vulnerabilities☆31Updated last year
- ☆51Updated this week
- Describe how to use ffuf different options with examples☆80Updated last year
- ☆27Updated 5 months ago
- Weaponize Your Burp is a repository for automation your Bug Bounty Hunting mindset in Burp Suite☆75Updated last year
- GBounty is a multi-step website vulnerability scanner developed in Golang designed to help companies, pentesters, and bug hunters identif…☆57Updated last week
- Oneliner Bug Bounty Collection collected from GitHub to all bug bounty hunters☆27Updated 11 months ago
- Run ffuf with the appropriate options to brute-force the directories using the awesome different wordlists.☆23Updated last year
- Nodesub is a command-line tool for finding subdomains in bug bounty programs☆136Updated 3 months ago
- FireHawk: The Elite Firebase Security Testing Utility☆18Updated 5 months ago
- KakHunt is a python GUI Tool private tool which earns me 100s of bugs every month. It spawns URLS and filters Sensitive Info.☆50Updated last year