Alternatives and similar repositories for WAFNinja:

Users that are interested in WAFNinja are comparing it to the libraries listed below

• enjoiz / XXEinjector
  Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
  ☆1,619Updated 4 months ago
• zt2 / sqli-hunter
  SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.
  ☆430Updated 11 months ago
• SecurityInnovation / AuthMatrix
  AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
  ☆625Updated last year
• BuffaloWill / oxml_xxe
  A tool for embedding XXE/XML exploits into different filetypes
  ☆1,074Updated 4 months ago
• ilmila / J2EEScan
  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…
  ☆659Updated last year
• stamparm / identYwaf
  Blind WAF identification tool
  ☆669Updated 10 months ago
• rajeshmajumdar / BruteXSS
  BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar …
  ☆531Updated 3 years ago
• Varbaek / xsser
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆425Updated 5 years ago
• codewatchorg / bypasswaf
  Add headers to all Burp requests to bypass some WAF products
  ☆331Updated 7 years ago
• D35m0nd142 / LFISuite
  Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner
  ☆1,804Updated 3 years ago
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆532Updated 4 years ago
• ewilded / shelling
  SHELLING - a comprehensive OS command injection payload generator
  ☆444Updated 5 years ago
• brianwrf / hackUtils
  It is a hack tool kit for pentest and web security research.
  ☆514Updated 4 years ago
• nccgroup / AutoRepeater
  Automated HTTP Request Repeating With Burp Suite
  ☆867Updated 3 years ago
• nccgroup / BurpSuiteHTTPSmuggler
  A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
  ☆721Updated 5 years ago
• erbbysam / DNSGrep
  Quickly Search Large DNS Datasets
  ☆582Updated 4 years ago
• m4ll0k / Atlas
  Quick SQLMap Tamper Suggester
  ☆1,372Updated 2 years ago
• federicodotta / Java-Deserialization-Scanner
  All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
  ☆784Updated 3 years ago
• s0md3v / Bolt
  CSRF Scanner
  ☆564Updated 9 months ago
• fgeek / pyfiscan
  Free web-application vulnerability and version scanner
  ☆574Updated last month
• chenjj / CORScanner
  🎯 Fast CORS misconfiguration vulnerabilities scanner
  ☆1,082Updated 3 years ago
• joaomatosf / jexboss
  JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
  ☆2,458Updated 5 years ago
• Ridter / Pentest
  tools
  ☆540Updated 6 years ago
• lwzSoviet / NoXss
  Faster xss scanner,support reflected-xss and dom-xss
  ☆445Updated last year
• hypn0s / AJPy
  ☆470Updated last year
• irsdl / IIS-ShortName-Scanner
  latest version of scanners for IIS short filename (8.3) disclosure vulnerability
  ☆1,509Updated last year
• PortSwigger / backslash-powered-scanner
  Finds unknown classes of injection vulnerabilities
  ☆672Updated last week
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆593Updated 3 years ago
• stamparm / DSXS
  Damn Small XSS Scanner
  ☆430Updated 4 years ago
• breenmachine / httpscreenshot
  ☆638Updated 6 months ago