#1Tools for finding and exploiting weaknesses in Web Application Firewalls to bypass their protections.
Kitploit recommended
robrankin/cve-2021-44228-waf-testsTesting WAF protection against CVE-2021-44228 Log4Shell
nbs-system/naxsiNAXSI is an open-source, high performance, low rules maintenance WAF for NGINX
optiv/freezeFreeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
clouedoc/autosqliAn automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.
getrektboy724/meterpwrshellAutomated Tool That Generates The Perfect Meterpreter Powershell Payload
bytereaper77/cve-2025-41373PoC for CVE-2025-41373 Authenticated SQL Injection in Gandia Integra Total v2.1.2217.3–4.4.2236.1
gui-ying233/cve-2025-61638Proof-of-concept exploit for CVE-2025-61638, a stored XSS vulnerability in MediaWiki's Sanitizer::validateAttributes. Tests for the flaw across…
bytereaper77/cve-2025-59342C exploit for CVE-2025-59342 path traversal in esm.sh CDN (v136 and earlier). Injects payloads via X-Zone-Id header with WAF bypass and cookie…
carlos-mesquita/tpaslog4shellpocProof of Concept for the Log4Shell vulnerability (CVE-2021-44228), developed as part of the coursework for the curricular unit TPAS in the Master's…
