Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Categories

WAF Bypass

Tools for finding and exploiting weaknesses in Web Application Firewalls to bypass their protections.

Kitploit recommended

Top tools

10 selected
wafw00f preview#1

wafw00f

GitHubenablesecurity/wafw00f
6.5k6 months ago
WhatWaf preview#2

WhatWaf

GitHubekultek/whatwaf
2.9k2 years ago
gotestwaf preview#3

gotestwaf

GitHubwallarm/gotestwaf
1.8k27 days ago
Awesome-WAF preview#4

Awesome-WAF

GitHub0xinfection/awesome-waf
7.6k1 month ago
identYwaf preview#5

identYwaf

GitHubstamparm/identywaf
7421 month ago
http-request-smuggler preview#6

http-request-smuggler

GitHubportswigger/http-request-smuggler
1.2k2 months ago
nowafpls preview#7

nowafpls

GitHubassetnote/nowafpls
1.5k1 year ago
nuclei preview#8

nuclei

GitHubprojectdiscovery/nuclei
30.4k3 days ago
sqlmap preview#9

sqlmap

GitHubsqlmapproject/sqlmap
38.2k17h 8m ago
XSStrike preview#10

XSStrike

GitHubs0md3v/xsstrike
15.1k1 year ago
NewestRelevanceMost popularRecently updated
293 results
XIP preview

XIP

GitHubimmunit/xip

XIP generates a list of IP addresses by applying a set of transformations used to bypass security measures e.g. blacklist filtering, WAF, etc.

ids-ips-evasioninformation-gatheringwaf-bypass+2
777 years ago
DAws preview

DAws

GitHubdotcppfile/daws

Advanced Web Shell

payload-generationids-ips-evasionshellcode+6
5819 years ago
XSSYA-V-2.0 preview

XSSYA-V-2.0

GitHubyehia-mamdouh/xssya-v-2.0

Python XSS scanner that confirms reflected and encoded-payload injection, executes payloads to capture cookies, detects WAFs, and tests XST with a…

vulnerability-scannersweb-vulnerability-scannerspayload-generation+5
839 years ago
snuck preview

snuck

GitHubmauro-g/snuck

Automatic XSS filter bypass

web-application-exploitationwaf-bypassweb-security+2
9011 years ago
quickjack preview

quickjack

GitHubsamyk/quickjack

Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.

exploitationids-ips-evasionphishing+4
24711 years ago
Previous1…1617Next