evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).
☆886Aug 7, 2026Updated this week
Alternatives and similar repositories for evilwaf
Users that are interested in evilwaf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Disposable, ephemeral network infrastructure powered by GitHub Codespaces.☆126Jul 23, 2026Updated 3 weeks ago
- ☆367Jul 19, 2026Updated 3 weeks ago
- ☆196Mar 16, 2026Updated 4 months ago
- The Ultimate Information Gathering Toolkit☆4,021Dec 10, 2025Updated 8 months ago
- claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md f…☆2,906May 8, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.☆2,917Aug 4, 2026Updated last week
- EVA is an AI-assisted penetration testing agent that enhances offensive security workflows by providing structured attack guidance, conte…☆496Jun 16, 2026Updated last month
- ↕️🤫 Stealth redirector for your red team operation security☆1,100Jul 20, 2026Updated 3 weeks ago
- AI-powered ffuf wrapper☆802Dec 4, 2025Updated 8 months ago
- ☆402Updated this week
- Grafana scanner with all public CVEs that I collected in one script to make grafana testing easier☆242Jul 7, 2026Updated last month
- AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude…☆4,191Updated this week
- RepShot · Generate professional security finding cards directly from Burp Suite Repeater.☆106May 31, 2026Updated 2 months ago
- ☆79Jan 1, 2026Updated 7 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…☆363Updated this week
- Open-source offensive security platform for conducting phishing campaigns that weaponizes iCalendar automatic event processing.☆274Dec 18, 2025Updated 7 months ago
- Vulnerability detection framework by Binarly's REsearch team☆876Updated this week
- Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more☆1,401Aug 5, 2026Updated last week
- Anonymous MAC address rotation tool for pentesting & OPSEC☆32Dec 28, 2025Updated 7 months ago
- High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential v…☆668Aug 4, 2026Updated last week
- AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox a…☆944Jun 20, 2026Updated last month
- Extract Windows credentials directly from VM memory snapshots and virtual disks☆1,496Jun 7, 2026Updated 2 months ago
- Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and co…☆810May 16, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Autonomous red teaming and evidence-backed security evaluation for live AI agents.☆28Jul 22, 2026Updated 3 weeks ago
- Lightweight binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy. Designed for red team operations and ephe…☆570Oct 3, 2025Updated 10 months ago
- A comprehensive modern architecture model is proposed to integrate platform solutions and tooling to support a professional Red Team.☆313May 3, 2026Updated 3 months ago
- Advanced Domain Controller attack and credential analysis tool leveraging DonPAPI database☆267Nov 3, 2025Updated 9 months ago
- Production-grade Web Application Firewall testing tool. Detects Cloudflare, AWS WAF, Akamai & more. Identifies bypass vectors via URL nor…☆47Nov 17, 2025Updated 8 months ago
- A tool that helps you find the real IP addresses hiding behind Cloudflare.☆640Jul 6, 2026Updated last month
- Passive leak enumeration tool.☆574Updated this week
- AV/EDR processes termination by exploiting a vulnerable driver (BYOVD)☆296Jan 21, 2026Updated 6 months ago
- AdaptixC2 is a highly modular advanced redteam toolkit☆3,492Aug 2, 2026Updated last week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A fast WordPress plugin enumeration tool☆927Jul 9, 2026Updated last month
- Active Directory Vulnerability Scanner☆473Mar 3, 2026Updated 5 months ago
- SilentButDeadly is a network communication blocker specifically designed to neutralize EDR/AV software by preventing their cloud connecti…☆455Nov 3, 2025Updated 9 months ago
- 🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast…☆1,829Jun 21, 2026Updated last month
- The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.☆512Mar 15, 2026Updated 4 months ago
- Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and book…☆558Jan 8, 2026Updated 7 months ago
- Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bo…☆799May 31, 2026Updated 2 months ago