Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
WAF_buster — Disrupt WAF by abusing SSL/TLS Ciphers | Kitploit
Tools/GitHubGitHub/viperbluff/waf_buster
WAF BypassWeb SecurityCryptographyPenetration Testing
GitHubviperbluff/waf_buster

WAF_buster

Disrupt WAF by abusing SSL/TLS Ciphers

View Repository
4811407 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

WAF_buster

Disrupt WAF by abusing SSL/TLS Ciphers

About WAF_buster

This tool was created to Analyze the ciphers that are supported by the Web application firewall being used at the web server end.(Reference:https://0x09al.github.io/waf/bypass/ssl/2018/07/02/web-application-firewall-bypass.html).It works by first triggering SslScan to look for all the supported ciphers during SSL/TLS negotiation with the web server.After getting the text file of all the supported ciphers, then we use Curl to query web server with each and every Cipher to check which of the ciphers are unsupported by WAF and supported by Web server , if any such Cipher is found then a message is displayed that "Firewall is bypassed".

Screenshots

WAF_buster

Installation

git clone https://github.com/viperbluff/WAF_buster.git

Python2

This tool has been created using Python2 and below modules have been used throughout:-

1.requests

2.os

3.sys

4.subprocess

Usage

Open terminal

python2 WAF_buster.py --input

Usage

Credits

Sahil Tikoo

Hacker

Download Tool