WhatWaf
ekultek/whatwafDetect and bypass web application firewalls and protection systems
penetration-testingvulnerability-scannerswaf-bypass+1
ekultek/whatwafDetect and bypass web application firewalls and protection systems
rbidou/pyraspRuntime Application Self Protection for Python web servers, serverless functions and MCP servers, detecting attacks, prompt injection and data leaks…
check-risk-waf/check-risk-wafCloud-based Web Application Firewall (WAF) providing L3/L7 protection against SQLi, XSS, DDoS, and bot attacks. Features AI assistant, anti-bot…
owasp-modsecurity/modsecurityModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…
waf-bypass-maker/waf-community-bypassesCurated CSV collection of community-sourced Web Application Firewall bypass payloads for testing and validating WAF protections.
ammarion/waf-detector🛡️ High-performance WAF & CDN detection tool. Identify protection layers (Cloudflare, Akamai, AWS, Fastly, and more), run effectiveness and…
deepfence/threatmapperOpen Source Cloud Native Application Protection Platform (CNAPP)
owasp/java-html-sanitizerTakes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.
owasp/honeypot-projectDeploy web honeypots to capture emerging attack data, analyze ModSecurity audit logs via ELK, and share threat intelligence with MISP for…
leebaird/engagement-mgrEngagement Manager is a web application for tracking offensive security engagements. It features a modern UI, built with Next.js, Prisma, and…
zecure/shadowdThe Shadow Daemon web application firewall server
duggytuxy/data-shield_ipv4_blocklistCurated IPv4 blocklist of malicious addresses, refreshed every 6 hours for firewall and WAF ingestion, with split lists and CTI-ready formats for…
snorby/snorbyRuby On Rails Application For Network Security Monitoring
specterops/bloodhoundSix Degrees of Domain Admin
dhmosfunk/7-zip-cve-2025-0411-pocThis repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.
unpredictable21/halo-cors-csrf-cve-2026-67921Proof-of-concept demonstrating a combined CORS misconfiguration and CSRF protection bypass in Halo CMS, enabling cross-site request forgery attacks…
as4mir/cve-2021-45007Proof-of-concept for CVE-2021-45007, a CSRF vulnerability in Plesk Obsidian 18.0.37, demonstrating request submission without CSRF token protection.