Alternatives and similar repositories for WAFNinja

Users that are interested in WAFNinja are comparing it to the libraries listed below

• SecurityInnovation / AuthMatrix
  AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
  ☆632Updated last year
• zt2 / sqli-hunter
  SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.
  ☆431Updated last year
• ilmila / J2EEScan
  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…
  ☆669Updated last year
• rajeshmajumdar / BruteXSS
  BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar …
  ☆549Updated 4 years ago
• deibit / cansina
  Web Content Discovery Tool
  ☆905Updated last year
• enjoiz / XXEinjector
  Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
  ☆1,683Updated 10 months ago
• stamparm / DSXS
  Damn Small XSS Scanner
  ☆434Updated 4 years ago
• codewatchorg / bypasswaf
  Add headers to all Burp requests to bypass some WAF products
  ☆329Updated 7 years ago
• BuffaloWill / oxml_xxe
  A tool for embedding XXE/XML exploits into different filetypes
  ☆1,111Updated 10 months ago
• nccgroup / BurpSuiteHTTPSmuggler
  A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
  ☆732Updated 6 years ago
• stamparm / DSSS
  Damn Small SQLi Scanner
  ☆862Updated 9 months ago
• stamparm / identYwaf
  Blind WAF identification tool
  ☆705Updated last year
• NetSPI / xssValidator
  This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.
  ☆417Updated 3 years ago
• Varbaek / xsser
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆424Updated 5 years ago
• nccgroup / CrossSiteContentHijacking
  Content hijacking proof-of-concept using Flash, PDF and Silverlight
  ☆384Updated 6 years ago
• fgeek / pyfiscan
  Free web-application vulnerability and version scanner
  ☆574Updated 7 months ago
• ewilded / shelling
  SHELLING - a comprehensive OS command injection payload generator
  ☆444Updated 5 years ago
• yanxiu0614 / subdomain3
  A new generation of tool for discovering subdomains( ip , cdn and so on)
  ☆714Updated 5 years ago
• federicodotta / Java-Deserialization-Scanner
  All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
  ☆796Updated 3 years ago
• nccgroup / AutoRepeater
  Automated HTTP Request Repeating With Burp Suite
  ☆884Updated 3 years ago
• modzero / mod0BurpUploadScanner
  HTTP file upload scanner for Burp Proxy
  ☆490Updated last year
• bcoles / ssrf_proxy
  SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.
  ☆475Updated 7 years ago
• offensive-security / masscan-web-ui
  MASSCAN Web UI
  ☆499Updated 3 years ago
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆551Updated 5 years ago
• breenmachine / httpscreenshot
  ☆643Updated last year
• chenjj / CORScanner
  🎯 Fast CORS misconfiguration vulnerabilities scanner
  ☆1,128Updated 3 years ago
• brianwrf / hackUtils
  It is a hack tool kit for pentest and web security research.
  ☆512Updated 5 years ago
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆590Updated 4 years ago
• PortSwigger / collaborator-everywhere
  A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by caus…
  ☆438Updated 6 months ago
• Ridter / Pentest
  tools
  ☆545Updated 6 years ago