🔥 Web application firewalls (WAF) bypass
☆56Nov 1, 2023Updated 2 years ago
Alternatives and similar repositories for WAF-Bypass
Users that are interested in WAF-Bypass are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bug Hunting Handbook☆11Aug 11, 2022Updated 3 years ago
- An ongoing & curated collection of awesome web vulnerability - Server-side request forgery software practices and remediation, libraries…☆24Feb 22, 2022Updated 4 years ago
- Automated bug bounty reconnaissance and scanning agent☆36Apr 9, 2026Updated 2 months ago
- Describe how to use ffuf different options with examples☆14Jun 13, 2022Updated 3 years ago
- Exploit Proof-of-Concept code for XAMPP v3.3.0 — '.ini' Buffer Overflow (Unicode + SEH)☆14Nov 1, 2023Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Grep subdomains from web pages.☆42Feb 10, 2025Updated last year
- A tool which allows HackerOne researchers to download their reports into a local, indexed, and searchable repository☆19Sep 29, 2022Updated 3 years ago
- ☆31Jun 5, 2023Updated 3 years ago
- PoC for CVE-2024-42327 / ZBX-25623☆18Dec 3, 2024Updated last year
- Host Header Vulnerability Scanner Automated Tool☆29Apr 18, 2025Updated last year
- WAF Environment for OpenAI Gym☆15Dec 13, 2020Updated 5 years ago
- Reversing Citrix Gateway for XSS☆17Jul 3, 2023Updated 2 years ago
- Exploits with pwntools library in Python3. ROP, BOF, SHELLCODE.☆20Feb 2, 2024Updated 2 years ago
- JoomSploit is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's critical…☆30Dec 19, 2023Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆15Oct 7, 2016Updated 9 years ago
- ☆12Jul 5, 2023Updated 2 years ago
- ☆25May 14, 2022Updated 4 years ago
- 📝 Web security related academic papers collection (just for myself).☆25Sep 9, 2021Updated 4 years ago
- CVE-2022-3910☆12Mar 14, 2023Updated 3 years ago
- Fetch data (open ports, CVEs, CPEs, ...) from shodan internetDB API☆91Jan 9, 2023Updated 3 years ago
- ☆13Jun 10, 2024Updated 2 years ago
- This tool is just after the first refactoring pushed. Original is from Will Vandevanter (BuffaloWill). Only rearrange the code which will…☆33Jun 10, 2016Updated 10 years ago
- A tampered payload generator to Fuzz Web Application Firewalls☆34Nov 4, 2019Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Spring Cloud Function SPEL RCE demo☆11Apr 2, 2022Updated 4 years ago
- ☆14Dec 12, 2022Updated 3 years ago
- ☆22Aug 18, 2018Updated 7 years ago
- RATs library 2003 to present☆17Oct 14, 2023Updated 2 years ago
- Use these VDP in Bug Hunting, These VDP are checked and verified by Bug Hunters☆20Aug 9, 2022Updated 3 years ago
- PWNable pyjail☆13Jan 13, 2025Updated last year
- psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & w…☆19Jun 28, 2018Updated 7 years ago
- the POC of package.json RCE☆27Jun 24, 2025Updated 11 months ago
- A Python tool to scan JavaScript files for sensitive information exposure, helping security researchers identify potential leaks of API k…☆16Feb 17, 2026Updated 3 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Post-exploitation framework that abuses trusted sites like Telegram and Discord for C2.☆69Apr 24, 2026Updated last month
- Penetration Testing Methodology - short notes☆11May 30, 2015Updated 11 years ago
- A Collection of Wordlists for Penetration Testing☆39Mar 13, 2026Updated 2 months ago
- KeySec Hunter is a **Chrome extension** that scans webpages and linked JavaScript files for **user-defined keywords** and **potential sec…☆60Dec 21, 2025Updated 5 months ago
- CVE-2022-22963 Spring-Cloud-Function-SpEL_RCE_exploit☆15Mar 30, 2022Updated 4 years ago
- Check your WAF before an attacker does☆1,485Mar 14, 2026Updated 2 months ago
- ☆19Oct 7, 2025Updated 8 months ago