Production-grade Web Application Firewall testing tool. Detects Cloudflare, AWS WAF, Akamai & more. Identifies bypass vectors via URL normalization. Perfect for bug bounty & pentesting.
☆48Nov 17, 2025Updated 11 months ago
Alternatives and similar repositories for waf-stressor
Users that are interested in waf-stressor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆18Sep 27, 2025Updated last year
- A powerful Burp Suite extension that automatically detects JavaScript URLs from HTTP traffic, scans them using TruffleHog for secrets det…☆30Oct 23, 2025Updated last year
- Framework Automatizado de Reconocimiento y Explotación☆16Mar 8, 2026Updated 7 months ago
- Smilex-Eye is a high-speed, advanced OSINT suite that bridges the gap between raw global internet data and actionable security intelligen…☆34Jun 25, 2026Updated 4 months ago
- ☆13Mar 12, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Умный бот-ассистент для Telegram Business. Подключается к профилю, отвечает от вашего имени. Несколько режимов общения: деловой, агрессив…☆16Jun 16, 2026Updated 4 months ago
- Burpsuite Extension for Jsmon☆26Jul 1, 2026Updated 3 months ago
- VulnSeer combines the power of Nmap's service detection with multiple AI providers to deliver intelligent vulnerability assessments. Unli…☆43Jun 12, 2025Updated last year
- Proof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with C…☆18Apr 12, 2026Updated 6 months ago
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆35Jul 23, 2026Updated 3 months ago
- Pipeline-based HTTP automation toolkit like openbullet☆24Jul 22, 2026Updated 3 months ago
- SNMP Bash Script to discover valid community strings, dump basic information, check for write permission and check for RCE.☆11Apr 27, 2024Updated 2 years ago
- Next-generation intelligent Web Fuzzer & Directory Scanner written in Go. Features WAF detection, secret scanning, auto-calibration, and …☆28Oct 1, 2026Updated 3 weeks ago
- Quickly collect data from thousands of exposed Elasticsearch or Kibana instances and generate a report to be analysed.☆30Jan 7, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Automagically decode DNS Exfiltration queries to convert Blind RCE into proper RCE via Burp Collaborator☆21Jan 7, 2026Updated 9 months ago
- A high-performance domain scanner that discovers active domains by testing multiple Top-Level Domains (TLDs) for given domain names.☆35Sep 30, 2026Updated 3 weeks ago
- ☆91Sep 13, 2025Updated last year
- BountyForge Professional Recon Environment Installer☆18Nov 22, 2025Updated 11 months ago
- Blocking Windows EDR agents by registering an own IPC-object in the Object Manager’s namespace (CVE-2023-3280, CVE-2024-5909, CVE-2024-20…☆36Feb 27, 2025Updated last year
- This is the word list for fuzzing kubernetes.☆14Nov 11, 2023Updated 2 years ago
- ☆18Aug 17, 2025Updated last year
- Elasticsearch Stack Overflow Vulnerability☆17Sep 23, 2023Updated 3 years ago
- MAD-CAT (Meow Attack Data Corruption Automation Tool) is a comprehensive security tool designed to simulate data corruption attacks again…☆38Sep 25, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Unofficial desktop launcher for DeepSeek Harness. Background service, tray icon, update prompts. Bundles Node and the harness, so nothing…☆14Sep 15, 2026Updated last month
- PathBuster - multiple hosts Web path scanner☆21Jun 3, 2024Updated 2 years ago
- Exploits Unauth Docker API☆46Apr 18, 2025Updated last year
- A lightweight tool designed to stop clickfix attacks by using clipboard formatting with execution surface checks☆16Mar 29, 2026Updated 7 months ago
- Scan websites for exposed Supabase JWTs, enumerate accessible tables, and detect sensitive data exposure automatically.☆127Dec 29, 2025Updated 9 months ago
- Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking☆150Jul 2, 2025Updated last year
- Rust-powered HTTP Request Smuggling Scanner.☆134Updated this week
- VDM sig bypass and additional WinAPI stubs☆21Feb 16, 2026Updated 8 months ago
- A powerful WIFI admin page cracker.☆20Dec 31, 2025Updated 9 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Havoc 3rd party agent. Designed to be evasive. Fully PIC shellcode agent.☆17Dec 29, 2022Updated 3 years ago
- this is a tool to detect the Web service is ok or not☆24Oct 14, 2020Updated 6 years ago
- # 🕵️ PathCatcher v1.0 - Path Traversal & LFI Scanner☆25Jul 13, 2025Updated last year
- Modified version of PEAS client for offensive operations☆50May 18, 2026Updated 5 months ago
- AWS services enumerator for penetration testing☆21Nov 11, 2025Updated 11 months ago
- The first open source runtime windows batch and command line deobfuscator☆50Jun 23, 2026Updated 4 months ago
- T-1 is a shellcode loader that leverages ML techniques to detect VM environments☆37Oct 30, 2024Updated last year