Alternatives and similar repositories for WAF-Bypass

Users that are interested in WAF-Bypass are comparing it to the libraries listed below

• kh4sh3i / FFUF-Tricks

  View on GitHub
  Describe how to use ffuf different options with examples
  ☆13Jun 13, 2022Updated 3 years ago
• kh4sh3i / Bug-Hunting-Handbook

  View on GitHub
  Bug Hunting Handbook
  ☆11Aug 11, 2022Updated 3 years ago
• SooLFaa / fuzzing

  View on GitHub
  ☆15Oct 7, 2016Updated 9 years ago
• ripp3rdoc / XAMPPv3.3.0-BOF

  View on GitHub
  Exploit Proof-of-Concept code for XAMPP v3.3.0 — '.ini' Buffer Overflow (Unicode + SEH)
  ☆14Nov 1, 2023Updated 2 years ago
• hemantsolo / Host-Header-Injection-Vulnerability-Scanner

  View on GitHub
  Host Header Vulnerability Scanner Automated Tool
  ☆28Apr 18, 2025Updated 9 months ago
• mibeh / VTDownloader

  View on GitHub
  A command-line tool written in Python 3 to download files from VirusTotal
  ☆16Sep 25, 2019Updated 6 years ago
• iustin24 / chameleon-wordlists

  View on GitHub
  Chameleon Wordlists
  ☆15Sep 13, 2022Updated 3 years ago
• k00kx / nuclei-templates

  View on GitHub
  Reversing Citrix Gateway for XSS
  ☆17Jul 3, 2023Updated 2 years ago
• paulveillard / cybersecurity-ssrf

  View on GitHub
  An ongoing & curated collection of awesome web vulnerability - Server-side request forgery software practices and remediation, libraries…
  ☆24Feb 22, 2022Updated 3 years ago
• compr00t / CVE-2024-42327

  View on GitHub
  PoC for CVE-2024-42327 / ZBX-25623
  ☆17Dec 3, 2024Updated last year
• PortSwigger / psycho-path

  View on GitHub
  psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & w…
  ☆19Jun 28, 2018Updated 7 years ago
• davidenetti / SoftwareSecurityNotes

  View on GitHub
  Exploits with pwntools library in Python3. ROP, BOF, SHELLCODE.
  ☆20Feb 2, 2024Updated 2 years ago
• h1pmnh / h1reports

  View on GitHub
  A tool which allows HackerOne researchers to download their reports into a local, indexed, and searchable repository
  ☆19Sep 29, 2022Updated 3 years ago
• dhmosfunk / simple-http-smuggler-generator

  View on GitHub
  This tool is developed for burp suite practitioner certificate exam and HTTP Request Smuggling labs. The most important about this tool i…
  ☆21Sep 15, 2022Updated 3 years ago
• minsooerickim / BufferOverflowAttack

  View on GitHub
  🔐 explores techniques to exploit and manipulate buffer overflow vulnerabilities in a program.
  ☆23Jun 18, 2023Updated 2 years ago
• 0xmaximus / final_freaking_nuclei_templates

  View on GitHub
  ☆26Jun 5, 2023Updated 2 years ago
• h0tak88r / Wordlists

  View on GitHub
  A Collection of Wordlists for Penetration Testing
  ☆32Dec 13, 2025Updated 2 months ago
• splitline / awesome-web-security-paper

  View on GitHub
  📝 Web security related academic papers collection (just for myself).
  ☆25Sep 9, 2021Updated 4 years ago
• badboycxcc / Netgear-ssl-vpn-20211222-CVE-2022-29383

  View on GitHub
  ☆27May 14, 2022Updated 3 years ago
• dsopas / XSS-oneliner-payload

  View on GitHub
  Compilation of JavaScript XSS oneliners payloads that rocks your nuts!
  ☆24Jul 14, 2017Updated 8 years ago
• monish-khatri / security-headers

  View on GitHub
  Package provides a minimal and simple integration to attach OWASP security headers for building a secure Laravel application.
  ☆18Mar 10, 2023Updated 2 years ago
• GinArea / gobybit

  View on GitHub
  Bybit API client library for Go (ByBit API connector)
  ☆10Dec 19, 2025Updated last month
• devploit / pwny.cc

  View on GitHub
  Repository of useful payloads and tips for pentesting/bug bounty.
  ☆29Nov 15, 2024Updated last year
• Cyber-218 / DDos-Tool

  View on GitHub
  اول اداة ددوس اتاك عربيه 🇱🇾
  ☆23Jun 18, 2024Updated last year
• zeronine9 / Blind_SPOT

  View on GitHub
  Blind spot is a python tool for blind injection vulnerabilities , SQLi time based , Command injection , code injection , SSTI
  ☆26Jan 6, 2021Updated 5 years ago
• nowak0x01 / JoomSploit

  View on GitHub
  JoomSploit is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's critical…
  ☆29Dec 19, 2023Updated 2 years ago
• Invicti-Security / web-inf-path-trav

  View on GitHub
  Tool for helping in the exploitation of path traversal vulnerabilities in Java web applications
  ☆32Nov 4, 2022Updated 3 years ago
• DEVCORE-Wargame / HITCON-2024

  View on GitHub
  HITCON 2024 x DEVCORE Wargame
  ☆31Aug 30, 2024Updated last year
• StefanMichielse / generate_xxe_payloads

  View on GitHub
  This tool is just after the first refactoring pushed. Original is from Will Vandevanter (BuffaloWill). Only rearrange the code which will…
  ☆32Jun 10, 2016Updated 9 years ago
• jayeshchauhan / SKANDA

  View on GitHub
  OWASP Skanda - SSRF Exploitation Framework
  ☆38Jul 6, 2013Updated 12 years ago
• yubsy / SubDiscovery

  View on GitHub
  Subdomain Recon Tool
  ☆13Sep 11, 2022Updated 3 years ago
• Kirill89 / prototype-pollution-exploits

  View on GitHub
  Prototype Pollution exploits collection
  ☆37Aug 8, 2021Updated 4 years ago
• francescolacerenza / TamperThemAll

  View on GitHub
  A tampered payload generator to Fuzz Web Application Firewalls
  ☆35Nov 4, 2019Updated 6 years ago
• cve-sandbox / jquery

  View on GitHub
  CVE Collection of jQuery XSS Payloads
  ☆75Jan 4, 2023Updated 3 years ago
• Dancas93 / SSRF-Scanner

  View on GitHub
  A Complete SSRF (Server Side Request Forgery) Scanner.
  ☆41Dec 1, 2025Updated 2 months ago
• alessiogilardi / time-based-blind-sql-injection

  View on GitHub
  Tooll for sql injections scan
  ☆11Jul 17, 2018Updated 7 years ago
• LiamAs05 / Auto-Pentester

  View on GitHub
  Final year project in Magshimim, focusing on Python development and Web Exploitation.
  ☆10Apr 29, 2023Updated 2 years ago
• paulveillard / cybersecurity-bug-bounty

  View on GitHub
  An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites…
  ☆43Jun 28, 2022Updated 3 years ago
• mr2tone / metasploit-webapp

  View on GitHub
  Metasploit framework via HTTP services
  ☆10Jul 31, 2021Updated 4 years ago