cloudbunny
warflop/cloudbunnyCloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to…
information-gatheringosintreconnaissance+2
376
warflop/cloudbunnyCloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to…
s0md3v/dumpStuff that doesn't deserves its own repository.
teler-sh/teler-wafteler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets,…
gotr00t0day/forbiddenpassMulti-domain HTTP 403 bypass scanner that tests header manipulation techniques to discover hidden access paths on web servers, supporting bulk domain…
bhavsec/autopentest-aiAgentic Pentesting MCP server that discovers, exploits, and reports web application vulnerabilities.
sech0us3/waf-checkerAutomated WAF assessment tool that detects firewall vendors, tests 19 attack categories with advanced evasion payloads, and provides color-coded…
portswigger/url-cheatsheet-dataThis is the data that powers the PortSwigger URL validation bypass cheat sheet.
ytkoka/impersonate-proxyA local MITM proxy that lets you control TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, and User-Agent — all from a single YAML…
aardwolfsecurityltd/bulk_403_bypassBash script that adds custom HTTP headers to requests for bulk testing of 403 bypass techniques on web applications.
weizman/cve-2020-6519Proof-of-concept exploit for CVE-2020-6519 - a Chromium zero-day that fully bypasses Content Security Policy (CSP) across platforms, enabling script…
skokoo/imcurvinAutomated web security auditing tool that detects environment misconfigurations, probes backend vulnerabilities, and bypasses WAF/IDS protections…
abdurahmon3236/cve-2022-4539Exploit for CVE-2022-4539 that spoofs X-Forwarded-For headers to bypass WordPress WAF IP-based login and logging restrictions. Includes scalable…
getrektboy724/meterpwrshellAutomated Tool That Generates The Perfect Meterpreter Powershell Payload
0xinfection/awesome-wafEverything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥
hahwul/dalfoxFast XSS scanner with parameter analysis, WAF fingerprinting, and DOM/AST verification. Supports reflected, stored, and DOM-based XSS detection via…
wallarm/gotestwafAn open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
mandatoryprogrammer/thermopticA next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.