Alternatives and similar repositories for WAFNinja

Users that are interested in WAFNinja are comparing it to the libraries listed below

• SecurityInnovation / AuthMatrix
  AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
  ☆629Updated last year
• zt2 / sqli-hunter
  SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.
  ☆433Updated last year
• enjoiz / XXEinjector
  Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
  ☆1,659Updated 8 months ago
• ilmila / J2EEScan
  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…
  ☆665Updated last year
• deibit / cansina
  Web Content Discovery Tool
  ☆906Updated last year
• Varbaek / xsser
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆426Updated 5 years ago
• rajeshmajumdar / BruteXSS
  BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar …
  ☆546Updated 4 years ago
• nccgroup / BurpSuiteHTTPSmuggler
  A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
  ☆728Updated 6 years ago
• BuffaloWill / oxml_xxe
  A tool for embedding XXE/XML exploits into different filetypes
  ☆1,100Updated 7 months ago
• stamparm / identYwaf
  Blind WAF identification tool
  ☆684Updated last year
• NetSPI / xssValidator
  This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.
  ☆416Updated 3 years ago
• codewatchorg / bypasswaf
  Add headers to all Burp requests to bypass some WAF products
  ☆330Updated 7 years ago
• nccgroup / AutoRepeater
  Automated HTTP Request Repeating With Burp Suite
  ☆878Updated 3 years ago
• nccgroup / CrossSiteContentHijacking
  Content hijacking proof-of-concept using Flash, PDF and Silverlight
  ☆383Updated 6 years ago
• yanxiu0614 / subdomain3
  A new generation of tool for discovering subdomains( ip , cdn and so on)
  ☆715Updated 5 years ago
• fgeek / pyfiscan
  Free web-application vulnerability and version scanner
  ☆574Updated 5 months ago
• federicodotta / Java-Deserialization-Scanner
  All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
  ☆789Updated 3 years ago
• ewilded / shelling
  SHELLING - a comprehensive OS command injection payload generator
  ☆444Updated 5 years ago
• d3vilbug / HackBar
  HackBar plugin for Burpsuite
  ☆1,586Updated 4 years ago
• tutorial0 / WebShell
  WebShell Collect
  ☆393Updated 8 years ago
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆594Updated 4 years ago
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆546Updated 4 years ago
• joaomatosf / jexboss
  JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
  ☆2,471Updated 5 years ago
• stamparm / DSXS
  Damn Small XSS Scanner
  ☆431Updated 4 years ago
• chenjj / CORScanner
  🎯 Fast CORS misconfiguration vulnerabilities scanner
  ☆1,109Updated 3 years ago
• brianwrf / hackUtils
  It is a hack tool kit for pentest and web security research.
  ☆513Updated 4 years ago
• modzero / mod0BurpUploadScanner
  HTTP file upload scanner for Burp Proxy
  ☆490Updated last year
• stamparm / DSSS
  Damn Small SQLi Scanner
  ☆854Updated 7 months ago
• Ridter / Pentest
  tools
  ☆547Updated 6 years ago
• CiscoCXSecurity / bbqsql
  SQL Injection Exploitation Tool
  ☆776Updated 6 years ago