Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
WAF Bypass — Page 17 | Kitploit
Categories

WAF Bypass

Tools for finding and exploiting weaknesses in Web Application Firewalls to bypass their protections.

Kitploit recommended

Top tools

10 selected
wafw00f preview#1

wafw00f

GitHubenablesecurity/wafw00f
6.5k6 months ago
WhatWaf preview#2

WhatWaf

GitHubekultek/whatwaf
2.9k2 years ago
gotestwaf preview#3

gotestwaf

GitHubwallarm/gotestwaf
1.8k28 days ago
Awesome-WAF preview#4

Awesome-WAF

GitHub0xinfection/awesome-waf
7.6k1 month ago
identYwaf preview#5

identYwaf

GitHubstamparm/identywaf
7421 month ago
http-request-smuggler preview#6

http-request-smuggler

GitHubportswigger/http-request-smuggler
1.2k2 months ago
nowafpls preview#7

nowafpls

GitHubassetnote/nowafpls
1.5k1 year ago
nuclei preview#8

nuclei

GitHubprojectdiscovery/nuclei
30.4k2h 53m ago
sqlmap preview#9

sqlmap

GitHubsqlmapproject/sqlmap
38.2k1 day ago
XSStrike preview#10

XSStrike

GitHubs0md3v/xsstrike
15.1k1 year ago
NewestRelevanceMost popularRecently updated
293 results
CVE-2021-40346 preview

CVE-2021-40346

GitHubknqyf263/cve-2021-40346

CVE-2021-40346 PoC (HAProxy HTTP Smuggling)

vulnerability-analysisexploitationids-ips-evasion+3
415 years ago
CVE-2025-55182 preview

CVE-2025-55182

GitHubth-secforge/cve-2025-55182

Scans for CVE-2025-55182, a critical RCE in React Server Components, with safe-check mode, WAF bypass, and multi-target scanning.

vulnerability-scannersexploitationweb-application-exploitation+3
10 months ago
TREVORproxy preview

TREVORproxy

GitHubblacklanternsecurity/trevorproxy

A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of…

waf-bypasspenetration-testing
5356 months ago
CVE-2025-55182-bypass preview

CVE-2025-55182-bypass

GitHubmomika233/cve-2025-55182-bypass

CVE-2025-55182-bypass-waf

vulnerability-analysisexploitationweb-application-exploitation+2
319 months ago
XSSYA-V-2.0 preview

XSSYA-V-2.0

GitHubyehia-mamdouh/xssya-v-2.0

Python XSS scanner that confirms reflected and encoded-payload injection, executes payloads to capture cookies, detects WAFs, and tests XST with a…

vulnerability-scannersweb-vulnerability-scannerspayload-generation+5
839 years ago
Previous1…1617Next