Alternatives and similar repositories for bypasswaf

Users that are interested in bypasswaf are comparing it to the libraries listed below

• DeEpinGh0st / Erebus

  View on GitHub
  CobaltStrike后渗透测试插件
  ☆1,554Oct 28, 2021Updated 4 years ago
• uknowsec / SharpToolsAggressor

  View on GitHub
  内网渗透中常用的c#程序整合成cs脚本，直接内存加载。持续更新~
  ☆498Feb 13, 2020Updated 6 years ago
• inbug-team / InScan

  View on GitHub
  边界打点后的自动化渗透工具
  ☆1,891Jul 19, 2021Updated 4 years ago
• safe6Sec / GolangBypassAV

  View on GitHub
  研究利用golang各种姿势bypassAV
  ☆815Apr 11, 2022Updated 3 years ago
• Daybr4ak / C2ReverseProxy

  View on GitHub
  一款可以在不出网的环境下进行反向代理及cs上线的工具
  ☆491Apr 26, 2023Updated 2 years ago
• FunnyWolf / pystinger

  View on GitHub
  Bypass firewall for traffic forwarding using webshell
  ☆1,432Sep 29, 2021Updated 4 years ago
• czz1233 / GBByPass

  View on GitHub
  冰蝎 哥斯拉 WebShell bypass
  ☆761Jan 15, 2026Updated last month
• wyzxxz / aksk_tool

  View on GitHub
  AK资源管理工具，阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储/火山引擎 AccessKey AccessKeySecret，利用AK获取资源信息和操作资源，ECS/CVM/E2/UHOST/ECI/BCC执行命令，OSS/COS/S3/BOS…
  ☆778Feb 13, 2025Updated last year
• wyzxxz / jndi_tool

  View on GitHub
  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具
  ☆2,010May 21, 2024Updated last year
• sf197 / GetPwd

  View on GitHub
  用CSharp写的一款信息搜集工具，目前支持Navicat、TeamView、Xshell、SecureCRT产品的密码解密
  ☆251Aug 26, 2020Updated 5 years ago
• lengjibo / RedTeamTools

  View on GitHub
  记录自己编写、修改的部分工具
  ☆1,462Oct 19, 2025Updated 3 months ago
• pmiaowu / BurpShiroPassiveScan

  View on GitHub
  一款基于BurpSuite的被动式shiro检测插件
  ☆1,790Dec 14, 2022Updated 3 years ago
• zilong3033 / fastjsonScan

  View on GitHub
  fastjson漏洞burp插件，检测fastjson<1.2.68基于dnslog，fastjson<=1.2.24和1.2.33<=fatjson<=1.2.47的不出网检测和TomcatEcho,SpringEcho回显方案。
  ☆124May 14, 2021Updated 4 years ago
• threedr3am / JSP-WebShells

  View on GitHub
  Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势
  ☆1,404Jan 18, 2022Updated 4 years ago
• exp1orer / JNDI-Inject-Exploit

  View on GitHub
  解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入
  ☆770Jan 26, 2022Updated 4 years ago
• c0ny1 / chunked-coding-converter

  View on GitHub
  Burp suite 分块传输辅助插件
  ☆2,021Feb 23, 2022Updated 3 years ago
• UzJu / Cloud-Bucket-Leak-Detection-Tools

  View on GitHub
  六大云存储，泄露利用检测工具
  ☆1,238Mar 28, 2025Updated 10 months ago
• pandasec888 / taowu-cobalt_strike

  View on GitHub
  ☆1,820Nov 24, 2025Updated 2 months ago
• LandGrey / webshell-detect-bypass

  View on GitHub
  绕过专业工具检测的Webshell研究文章和免杀的Webshell
  ☆1,732Nov 15, 2020Updated 5 years ago
• w0x68y / bypassWAF

  View on GitHub
  bypassD盾、安全狗、云锁
  ☆108Mar 31, 2021Updated 4 years ago
• pureqh / webshell

  View on GitHub
  免杀webshell生成工具
  ☆765Apr 22, 2021Updated 4 years ago
• Ch1ngg / JCE

  View on GitHub
  JCE - JSP/JPSX CodeEncode - 用于 Webshell 逃避静态查杀的辅助脚本
  ☆258Oct 29, 2021Updated 4 years ago
• wafinfo / Sunflower_get_Password

  View on GitHub
  一款针对向日葵的识别码和验证码提取工具
  ☆923Nov 1, 2021Updated 4 years ago
• lintstar / LSTAR

  View on GitHub
  LSTAR - CobaltStrike 综合后渗透插件
  ☆1,262Jan 30, 2022Updated 4 years ago
• z1un / Z1-AggressorScripts

  View on GitHub
  适用于Cobalt Strike的插件
  ☆562May 30, 2021Updated 4 years ago
• wgpsec / DBJ

  View on GitHub
  大宝剑-边界资产梳理工具（红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配）
  ☆924Feb 8, 2022Updated 4 years ago
• QAX-A-Team / sharpwmi

  View on GitHub
  sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。
  ☆717Aug 3, 2021Updated 4 years ago
• xinyu2428 / TDOA_RCE

  View on GitHub
  通达OA综合利用工具
  ☆516Mar 17, 2021Updated 4 years ago
• Airboi / bypass-av-note

  View on GitHub
  免杀技术大杂烩---乱拳也打不死老师傅
  ☆1,095Mar 29, 2021Updated 4 years ago
• dr0op / CrossNet-Beta

  View on GitHub
  红队行动中利用白利用、免杀、自动判断网络环境生成钓鱼可执行文件。
  ☆366Jun 19, 2024Updated last year
• uknowsec / SharpSQLTools

  View on GitHub
  SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。
  ☆965Aug 5, 2021Updated 4 years ago
• mrknow001 / aliyun-accesskey-Tools

  View on GitHub
  阿里云accesskey利用工具
  ☆1,224Apr 8, 2022Updated 3 years ago
• Rvn0xsy / PassDecode-jar

  View on GitHub
  帆软/致远密码解密工具
  ☆360Jul 29, 2021Updated 4 years ago
• dr0op / shiro-550-with-NoCC

  View on GitHub
  Shiro-550 不依赖CC链利用工具
  ☆451Jun 19, 2024Updated last year
• Gality369 / CS-Loader

  View on GitHub
  CSLoader is a general purpose obfuscation and anti-virus tool based on a reimplementation of the llvm project obfuscator(https://github.c…
  ☆839Apr 2, 2025Updated 10 months ago
• lengjibo / FourEye

  View on GitHub
  AV Evasion Tool For Red Team Ops
  ☆768Dec 8, 2021Updated 4 years ago
• NyDubh3 / CuiRi

  View on GitHub
  一款红队专用免杀木马生成器，基于shellcode生成绕过所有杀软的木马。
  ☆925Sep 8, 2021Updated 4 years ago
• aleenzz / MSSQL_SQL_BYPASS_WIKI

  View on GitHub
  MSSQL注入提权,bypass的一些总结
  ☆736Jun 25, 2024Updated last year
• Richard-Tang / x1DecoderPlus

  View on GitHub
  AntSword(蚁剑)全参数流量XOR和Base64加伪装WebShell
  ☆163Sep 28, 2021Updated 4 years ago