evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).
☆924Oct 24, 2026Updated last week
Alternatives and similar repositories for evilwaf
Users that are interested in evilwaf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Extract Windows credentials directly from VM memory snapshots and virtual disks☆1,649Updated this week
- Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and co…☆845May 16, 2026Updated 5 months ago
- ☆412Oct 10, 2026Updated 3 weeks ago
- PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.☆3,230Oct 26, 2026Updated last week
- Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full writ…☆1,323Sep 1, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Disposable, ephemeral network infrastructure powered by GitHub Codespaces.☆129Jul 23, 2026Updated 3 months ago
- The Ultimate Information Gathering Toolkit☆4,292Dec 10, 2025Updated 10 months ago
- AutoPentestX – Automated Pentesting & Vulnerability Reporting Tool☆1,574Feb 2, 2026Updated 9 months ago
- Meet Mitsu, your chibi red-team operator. Connect your AI provider, set the scope, and she can take an authorized pentest from recon and …☆536Oct 24, 2026Updated last week
- ☆199Mar 16, 2026Updated 7 months ago
- ↕️🤫 Stealth redirector for your red team operation security☆1,118Jul 20, 2026Updated 3 months ago
- AI-powered ffuf wrapper☆812Dec 4, 2025Updated 10 months ago
- Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more☆1,562Oct 21, 2026Updated last week
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆5,528Updated this week
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…☆501Oct 26, 2026Updated last week
- IP obfuscation and URL generator.☆47Dec 8, 2025Updated 10 months ago
- Grafana scanner with all public CVEs that I collected in one script to make grafana testing easier☆243Sep 11, 2026Updated last month
- ☆407Oct 23, 2026Updated last week
- A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curat…☆5,365Updated this week
- AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox a…☆1,082Updated this week
- Python Exploitation Framework, V8 Engine Debugger, Proxy interceptor, marketplace, post-exploitation, backdoor generator,....☆629Updated this week
- High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential v…☆760Updated this week
- Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | …☆2,178Oct 16, 2026Updated 2 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 403/401 bypass tool: finds HTTP access-control bypasses via path, method, header and raw-request mutations. Baseline diff, auto-calibrati…☆1,915Updated this week
- Open-source AI-powered offensive security harness for automated penetration testing.☆3,330Updated this week
- List of AI Hacking Agents☆739Updated this week
- AdaptixC2 is a highly modular advanced redteam toolkit☆3,814Updated this week
- Lightweight binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy. Designed for red team operations and ephe…☆574Oct 3, 2025Updated last year
- NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive securi…☆1,497Oct 19, 2026Updated 2 weeks ago
- Production-grade Web Application Firewall testing tool. Detects Cloudflare, AWS WAF, Akamai & more. Identifies bypass vectors via URL nor…☆48Nov 17, 2025Updated 11 months ago
- Open-source offensive security platform for conducting phishing campaigns that weaponizes iCalendar automatic event processing.☆278Dec 18, 2025Updated 10 months ago
- Vulnerability detection framework by Binarly's REsearch team☆896Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands…☆765Updated this week
- A curated collection of offensive, defensive and AI/LLM security tools.☆184Updated this week
- This is the tool to dump the LSASS process on modern Windows 11☆680May 23, 2026Updated 5 months ago
- Lab4PurpleSec is a modular Purple Team homelab combining a vulnerable Active Directory environment (GOAD), a Docker-based web DMZ, pfSens…☆333Updated this week
- ☆80Jan 1, 2026Updated 10 months ago
- Anonymous MAC address rotation tool for pentesting & OPSEC☆30Dec 28, 2025Updated 10 months ago
- Active Directory Vulnerability Scanner☆483Mar 3, 2026Updated 7 months ago