evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).
☆890Aug 7, 2026Updated 3 weeks ago
Alternatives and similar repositories for evilwaf
Users that are interested in evilwaf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Disposable, ephemeral network infrastructure powered by GitHub Codespaces.☆127Jul 23, 2026Updated last month
- ☆389Updated this week
- ☆197Mar 16, 2026Updated 5 months ago
- The Ultimate Information Gathering Toolkit☆4,097Dec 10, 2025Updated 8 months ago
- claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md f…☆3,017Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.☆3,038Updated this week
- EVA is an AI-assisted penetration testing agent that enhances offensive security workflows by providing structured attack guidance, conte…☆526Jun 16, 2026Updated 2 months ago
- ↕️🤫 Stealth redirector for your red team operation security☆1,104Jul 20, 2026Updated last month
- AI-powered ffuf wrapper☆804Dec 4, 2025Updated 8 months ago
- ☆402Aug 20, 2026Updated last week
- Grafana scanner with all public CVEs that I collected in one script to make grafana testing easier☆242Jul 7, 2026Updated last month
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆4,668Updated this week
- RepShot · Generate professional security finding cards directly from Burp Suite Repeater.☆108May 31, 2026Updated 3 months ago
- ☆79Jan 1, 2026Updated 8 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…☆480Aug 19, 2026Updated 2 weeks ago
- Open-source offensive security platform for conducting phishing campaigns that weaponizes iCalendar automatic event processing.☆275Dec 18, 2025Updated 8 months ago
- Vulnerability detection framework by Binarly's REsearch team☆881Aug 25, 2026Updated last week
- Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more☆1,477Updated this week
- Anonymous MAC address rotation tool for pentesting & OPSEC☆33Dec 28, 2025Updated 8 months ago
- High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential v…☆686Updated this week
- AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox a…☆980Jun 20, 2026Updated 2 months ago
- Extract Windows credentials directly from VM memory snapshots and virtual disks☆1,511Jun 7, 2026Updated 2 months ago
- Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and co…☆837May 16, 2026Updated 3 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Autonomous red teaming and evidence-backed security evaluation for live AI agents.☆28Jul 22, 2026Updated last month
- Lightweight binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy. Designed for red team operations and ephe…☆572Oct 3, 2025Updated 10 months ago
- A comprehensive modern architecture model is proposed to integrate platform solutions and tooling to support a professional Red Team.☆316Aug 19, 2026Updated 2 weeks ago
- Advanced Domain Controller attack and credential analysis tool leveraging DonPAPI database☆267Nov 3, 2025Updated 10 months ago
- Production-grade Web Application Firewall testing tool. Detects Cloudflare, AWS WAF, Akamai & more. Identifies bypass vectors via URL nor…☆47Nov 17, 2025Updated 9 months ago
- A tool that helps you find the real IP addresses hiding behind Cloudflare.☆642Jul 6, 2026Updated last month
- Passive leak enumeration tool.☆591Updated this week
- AV/EDR processes termination by exploiting a vulnerable driver (BYOVD)☆298Jan 21, 2026Updated 7 months ago
- AdaptixC2 is a highly modular advanced redteam toolkit☆3,571Aug 22, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A fast WordPress plugin enumeration tool☆941Aug 25, 2026Updated last week
- Active Directory Vulnerability Scanner☆474Mar 3, 2026Updated 5 months ago
- SilentButDeadly is a network communication blocker specifically designed to neutralize EDR/AV software by preventing their cloud connecti…☆456Nov 3, 2025Updated 9 months ago
- 🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast…☆1,869Jun 21, 2026Updated 2 months ago
- The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.☆510Mar 15, 2026Updated 5 months ago
- Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and book…☆560Jan 8, 2026Updated 7 months ago
- Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bo…☆809May 31, 2026Updated 3 months ago