针对 Java 幽灵比特位漏洞的 WAF 绕过辅助工具，支持敏感字符替换、payload 编码与命令生成，帮助快速突破文件读取场景的安全过滤限制。
☆25Apr 29, 2026Updated 5 months ago
Alternatives and similar repositories for GhostBits-WAF-Bypass-Toolkit
Users that are interested in GhostBits-WAF-Bypass-Toolkit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 渗透测试实战工作流 skill for Claude Code - 5阶段方法论/19类攻击playbook/2887份H1真实案例/国产组件指纹库☆38Sep 14, 2026Updated last month
- 基于 Y4er/ysoserial 与 marshalsec 的 Java 反序列化利用 GUI 工具，集成 Payload 生成、JNDI Reference、LDAP 反序列化与调用图编辑。☆44May 5, 2026Updated 5 months ago
- Unauthorized_Application_Check 未授权应用漏洞批量检查，包含redis,Hadoop,docker,CouchDB,ftp,zookeeper,elasticsearch,memcached,mongodb,rsync_access,mysql…☆15Feb 1, 2022Updated 4 years ago
- 收录了GitHub上的一些优质漏洞库，并提供一键下载与更新功能。It includes some high-quality vulnerability libraries on GitHub and provides one-click download and updat…☆16May 28, 2026Updated 4 months ago
- 致远OA利用工具☆26Jul 15, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- WebSocket 内存马/Webshell，一种新型内存马/WebShell技术☆21Apr 10, 2023Updated 3 years ago
- ngxray — nginx config security scanner☆25May 29, 2026Updated 4 months ago
- 基于 Agent + Instrumentation + ASM 的 Java 进程内存马检测与清除查杀工具（含 GUI）+CLI命令行操作功能☆42Oct 27, 2025Updated 11 months ago
- 掘地三尺（DigDeep）：覆盖云安全 、小程序、APP、web等常见敏感信息泄露类型，一键挖掘源码中的密码/密钥/手机号/身份证/云服务AK、SK等近百类敏感数据。☆95Apr 12, 2026Updated 6 months ago
- Telegram CVE-2026-107181☆20Oct 10, 2026Updated last week
- ☆32Apr 7, 2022Updated 4 years ago
- CVE-2026-2005 — PostgreSQL pgcrypto heap overflow RCE exploit☆18May 5, 2026Updated 5 months ago
- Atlassian Jira Seraph Authentication Bypass RCE（CVE-2022-0540）☆71May 25, 2022Updated 4 years ago
- Claude Code RedTeam Skill — Hypothesis-Driven Cognitive Architecture。一个假设-证据驱动的红队skill☆324Aug 3, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- uncover mcp server☆14Apr 2, 2025Updated last year
- NextAnti is a browser extension focused on anti-honeypot and anti anti-honeypot techniques, NextAnti 是一款专门用于浏览器反蜜罐反反蜜罐（Anti-Honeypot）的插件，…☆40Jun 22, 2026Updated 4 months ago
- cve系列更新☆33Aug 28, 2026Updated last month
- ☆48Apr 28, 2026Updated 5 months ago
- C++ python bytecode disassembler and decompiler☆16Dec 11, 2022Updated 3 years ago
- 根据hanc00l和m0l1ce提供的数据构建docker版的乌云漏洞库，包含8.8W漏洞信息☆13Oct 7, 2020Updated 6 years ago
- [golang] store the code/notes of students who are interested in joining west2-online. It records their learning process bit by bit.☆12Sep 3, 2026Updated last month
- xiaSql的python魔改版☆16Oct 31, 2024Updated last year
- Exploit ConnectWise ScreenConnect (bypass authentication)☆12Feb 21, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Fuzzing with the generated argument and environment variable☆10Jul 14, 2022Updated 4 years ago
- ActiveMQ Deserialization RCE☆15Aug 30, 2019Updated 7 years ago
- 亿赛通综合漏洞利用工具☆32Jan 16, 2025Updated last year
- 新一代反制型蜜罐平台：通过反向代理在真实业务系统中无损植入蜜饵与虚拟路由，利用功能性伪装与反向提示词注入反控 AI 渗透 Agent，实现攻击捕获、画像溯源与上线反制。☆146Updated this week
- 🚀 AI-Powered Red Team & Pentest Toolkit | 赋能红队与渗透测试的 AI 工具集☆121Jan 6, 2026Updated 9 months ago
- ☆34Mar 20, 2024Updated 2 years ago
- ☆20Aug 22, 2025Updated last year
- WAFBypass 是一款高级Web应用防火墙（WAF）检测与绕过工具，旨在回答一个问题："目标真的有WAF防护吗？" 它能够检测目标Web应用是否受到防火墙保护，并自动尝试寻找有效的绕过方法。☆21Sep 26, 2026Updated 3 weeks ago
- ☆13Jan 3, 2021Updated 5 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- 集成fofa,hunter,shodan,0zone等搜索引擎的信息收集工具,带有自动保存xlsx文件功能☆12Jun 3, 2025Updated last year
- ☆14Jun 12, 2025Updated last year
- (module) A Go IP filter and rate limiting middleware with Redis IP blacklist, GeoLite2 impossible travel, and device risk scoring☆15Oct 6, 2026Updated 2 weeks ago
- 用于转换BurpSuite上无敌的Hae信息收集插件的配置规则为yakit使用☆18Apr 16, 2025Updated last year
- FastMatchingEngine 是一款高性能的数字货币撮合引擎 POC 实现。该项目是用 Java 语言进行开发，无任何第三方依赖。☆14Dec 28, 2021Updated 4 years ago
- ☆13Jan 13, 2025Updated last year
- CVE-2022-22947_EXP,CVE-2022-22947_RCE,CVE-2022-22947反弹shell,CVE-2022-22947 getshell☆35Mar 8, 2022Updated 4 years ago