Alternatives and similar repositories for WAFNinja

Users that are interested in WAFNinja are comparing it to the libraries listed below

• brianwrf / hackUtils

  View on GitHub
  It is a hack tool kit for pentest and web security research.
  ☆516Oct 2, 2020Updated 5 years ago
• 3xp10it / xwaf

  View on GitHub
  Automatic bypass (brute force) waf
  ☆994Mar 9, 2022Updated 3 years ago
• EnableSecurity / wafw00f

  View on GitHub
  WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
  ☆6,157Jan 27, 2026Updated 2 weeks ago
• erevus-cn / pocscan

  View on GitHub
  Will to be a niubility scan-framework
  ☆518Jul 1, 2025Updated 7 months ago
• rastating / wordpress-exploit-framework

  View on GitHub
  A Ruby framework designed to aid in the penetration testing of WordPress systems.
  ☆1,044Nov 24, 2019Updated 6 years ago
• knownsec / Pocsuite

  View on GitHub
  This project has stopped to maintenance, please to https://github.com/knownsec/pocsuite3 project.
  ☆1,821May 27, 2022Updated 3 years ago
• wafpassproject / wafpass

  View on GitHub
  Analysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF.
  ☆224Oct 16, 2023Updated 2 years ago
• joaomatosf / jexboss

  View on GitHub
  JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
  ☆2,502Jan 21, 2020Updated 6 years ago
• julienbedard / browsersploit

  View on GitHub
  BrowserExploit is an advanced browser exploit pack for doing internal and external pentesting, helping gaining access to internal compute…
  ☆333Apr 19, 2017Updated 8 years ago
• ilmila / J2EEScan

  View on GitHub
  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…
  ☆677Oct 29, 2025Updated 3 months ago
• tcstool / Fireaway

  View on GitHub
  Next Generation Firewall Audit and Bypass Tool
  ☆266Apr 24, 2017Updated 8 years ago
• owtf / wafbypasser

  View on GitHub
  ☆80Oct 10, 2014Updated 11 years ago
• CHYbeta / cmsPoc

  View on GitHub
  CMS渗透测试框架-A CMS Exploit Framework
  ☆583Mar 2, 2018Updated 7 years ago
• ewilded / shelling

  View on GitHub
  SHELLING - a comprehensive OS command injection payload generator
  ☆446Mar 16, 2020Updated 5 years ago
• ysrc / F-Scrack

  View on GitHub
  F-Scrack is a single file bruteforcer supports multi-protocol
  ☆310Sep 5, 2017Updated 8 years ago
• lijiejie / BBScan

  View on GitHub
  A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers
  ☆2,366Dec 31, 2024Updated last year
• zt2 / sqli-hunter

  View on GitHub
  SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.
  ☆434Apr 27, 2024Updated last year
• deibit / cansina

  View on GitHub
  Web Content Discovery Tool
  ☆908Jun 7, 2024Updated last year
• foxglovesec / JavaUnserializeExploits

  View on GitHub
  ☆502Mar 10, 2016Updated 9 years ago
• Coalfire-Research / java-deserialization-exploits

  View on GitHub
  A collection of curated Java Deserialization Exploits
  ☆592May 16, 2021Updated 4 years ago
• codewatchorg / bypasswaf

  View on GitHub
  Add headers to all Burp requests to bypass some WAF products
  ☆330Jan 28, 2018Updated 8 years ago
• 0xbug / SQLiScanner

  View on GitHub
  Automatic SQL injection with Charles and sqlmap api
  ☆820May 1, 2018Updated 7 years ago
• lightbulb-framework / lightbulb-framework

  View on GitHub
  Tools for auditing WAFS
  ☆464Nov 24, 2020Updated 5 years ago
• foospidy / payloads

  View on GitHub
  Git All the Payloads! A collection of web attack payloads.
  ☆3,891May 15, 2023Updated 2 years ago
• Varbaek / xsser

  View on GitHub
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆426Feb 18, 2020Updated 5 years ago
• nanshihui / Scan-T

  View on GitHub
  a new crawler based on python with more function including Network fingerprint search
  ☆504Aug 14, 2018Updated 7 years ago
• sensepost / reGeorg

  View on GitHub
  The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
  ☆3,152Mar 6, 2025Updated 11 months ago
• 1N3 / IntruderPayloads

  View on GitHub
  A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and…
  ☆3,897Sep 27, 2021Updated 4 years ago
• FeeiCN / Cobra

  View on GitHub
  Source Code Security Audit (源代码安全审计)
  ☆3,188Sep 16, 2022Updated 3 years ago
• ysrc / GourdScanV2

  View on GitHub
  被动式漏洞扫描系统
  ☆873Nov 1, 2017Updated 8 years ago
• firesunCN / BlueLotus_XSSReceiver

  View on GitHub
  ☆1,613Feb 2, 2023Updated 3 years ago
• lijiejie / htpwdScan

  View on GitHub
  HTTP weak pass scanner
  ☆914Sep 7, 2021Updated 4 years ago
• FuzzySecurity / PowerShell-Suite

  View on GitHub
  My musings with PowerShell
  ☆2,705Nov 19, 2021Updated 4 years ago
• xmendez / wfuzz

  View on GitHub
  Web application fuzzer
  ☆6,410Jan 21, 2026Updated 3 weeks ago
• enjoiz / XXEinjector

  View on GitHub
  Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
  ☆1,704Dec 1, 2024Updated last year
• nettitude / xss_payloads

  View on GitHub
  Exploitation for XSS
  ☆730Aug 5, 2021Updated 4 years ago
• nixawk / labs

  View on GitHub
  Vulnerability Labs for security analysis
  ☆1,172Mar 10, 2021Updated 4 years ago
• Lucifer1993 / struts-scan

  View on GitHub
  Python2编写的struts2漏洞全版本检测和利用工具
  ☆1,420May 7, 2019Updated 6 years ago
• XiphosResearch / exploits

  View on GitHub
  Miscellaneous exploit code
  ☆1,570Oct 6, 2023Updated 2 years ago