Alternatives and similar repositories for WAFNinja

Users that are interested in WAFNinja are comparing it to the libraries listed below

• SecurityInnovation / AuthMatrix
  AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
  ☆631Updated last year
• zt2 / sqli-hunter
  SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.
  ☆431Updated last year
• enjoiz / XXEinjector
  Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
  ☆1,670Updated 10 months ago
• deibit / cansina
  Web Content Discovery Tool
  ☆906Updated last year
• ilmila / J2EEScan
  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…
  ☆669Updated last year
• rajeshmajumdar / BruteXSS
  BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar …
  ☆547Updated 4 years ago
• Varbaek / xsser
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆424Updated 5 years ago
• codewatchorg / bypasswaf
  Add headers to all Burp requests to bypass some WAF products
  ☆329Updated 7 years ago
• BuffaloWill / oxml_xxe
  A tool for embedding XXE/XML exploits into different filetypes
  ☆1,108Updated 9 months ago
• nccgroup / BurpSuiteHTTPSmuggler
  A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
  ☆732Updated 6 years ago
• fgeek / pyfiscan
  Free web-application vulnerability and version scanner
  ☆574Updated 7 months ago
• yanxiu0614 / subdomain3
  A new generation of tool for discovering subdomains( ip , cdn and so on)
  ☆715Updated 5 years ago
• stamparm / identYwaf
  Blind WAF identification tool
  ☆701Updated last year
• NetSPI / xssValidator
  This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.
  ☆416Updated 3 years ago
• ewilded / shelling
  SHELLING - a comprehensive OS command injection payload generator
  ☆444Updated 5 years ago
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆591Updated 4 years ago
• Ridter / Pentest
  tools
  ☆546Updated 6 years ago
• brianwrf / hackUtils
  It is a hack tool kit for pentest and web security research.
  ☆513Updated 5 years ago
• stamparm / DSSS
  Damn Small SQLi Scanner
  ☆858Updated 9 months ago
• nccgroup / CrossSiteContentHijacking
  Content hijacking proof-of-concept using Flash, PDF and Silverlight
  ☆384Updated 6 years ago
• stamparm / DSXS
  Damn Small XSS Scanner
  ☆433Updated 4 years ago
• breenmachine / httpscreenshot
  ☆641Updated last year
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆550Updated 5 years ago
• d3vilbug / HackBar
  HackBar plugin for Burpsuite
  ☆1,596Updated 4 years ago
• federicodotta / Java-Deserialization-Scanner
  All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
  ☆796Updated 3 years ago
• tutorial0 / WebShell
  WebShell Collect
  ☆393Updated 9 years ago
• joaomatosf / jexboss
  JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
  ☆2,480Updated 5 years ago
• nccgroup / AutoRepeater
  Automated HTTP Request Repeating With Burp Suite
  ☆883Updated 3 years ago
• modzero / mod0BurpUploadScanner
  HTTP file upload scanner for Burp Proxy
  ☆490Updated last year
• offensive-security / masscan-web-ui
  MASSCAN Web UI
  ☆496Updated 2 years ago