SafeLine
chaitin/safelineSelf-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…
vulnerability-scannersdynamic-code-analysisids-ips-evasion+8
22.3k
Tools for finding and exploiting weaknesses in Web Application Firewalls to bypass their protections.
chaitin/safelineSelf-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…
matrixtm/mhddosBest DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods
crowdsecurity/crowdsecOpen-source IDS/IPS and WAF engine that analyzes logs and HTTP requests to detect and block malicious IPs, leveraging a crowdsourced community…
owasp-modsecurity/modsecurityModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…
0xinfection/awesome-wafEverything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥
s0md3v/xsstrikeMost advanced XSS scanner.
bunkerity/bunkerweb🛡️ Open-source and cloud-native Web Application Firewall (WAF)
commixproject/commixAutomated All-in-One OS Command Injection Exploitation Tool
ultrafunkamsterdam/nodriverSuccessor of Undetected-Chromedriver. Providing a blazing fast framework for web automation, webscraping, bots and any other creative ideas which are…
hahwul/dalfoxFast XSS scanner with parameter analysis, WAF fingerprinting, and DOM/AST verification. Supports reflected, stored, and DOM-based XSS detection via…
coreruleset/corerulesetGeneric attack detection rule set for web application firewalls, protecting against OWASP Top Ten and common vulnerabilities with minimal false…
corazawaf/corazaGo-based Web Application Firewall library compatible with ModSecurity SecLang rules and OWASP Core Rule Set v4, providing real-time HTTP traffic…
enablesecurity/wafw00fAutomated Web Application Firewall fingerprinting tool that identifies and detects over 200 WAF products by analyzing HTTP responses to normal and…
kaliiiiiiiiii-vinyzu/patchrightUndetected version of the Playwright testing and automation library.
kleiton0x00/advanced-sql-injection-cheatsheetA cheat sheet that contains advanced queries for SQL Injection of all types.
khalilbijjou/wafninjaWAFNinja is a tool which contains two functions to attack Web Application Firewalls.
assetnote/react2shell-scannerHigh Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)