BurpSuiteHTTPSmuggler
WAF buster
A tool to bypass web application firewalls (WAFs) and test their effectiveness
A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
711 stars
28 watching
105 forks
Language: Java
last commit: over 6 years ago burpsuiteburpsuite-extenderbypasswaf
Related projects:
| Repository | Description | Stars |
|---|---|---|
 julianjm/waf_bypadd | An extension that bypasses Web Application Firewalls by padding HTTP requests with dummy data | 4 |
 anof-cyber/pycript | A tool for bypassing client-side encryption in web applications during penetration testing and bug bounty activities | 192 |
 codewatchorg/bypasswaf | An extension that automatically adds headers to Burp requests to bypass certain Web Application Firewall products. | 330 |
 wrvenkat/burp-multistep-csrf-poc | An extension for Burp Suite that generates multi-step CSRF POCs from selected requests. | 29 |
| nccgroup/wcfdser-ngng | A tool that enables modification of binary SOAP objects during communication with a WCF service | 29 |
| nccgroup/autorepeater | Automates HTTP request testing and modification within Burp Suite to streamline authorization testing | 853 |
 d3vilbug/hackbar | A plugin for Burpsuite that enables advanced web application testing and exploitation techniques | 1,549 |
| anof-cyber/paraforge | An extension for Burp Suite to extract parameters and endpoints from requests to create custom wordlists for testing | 140 |
 tomsteele/burpbuddy | Enables development of Burp Suite extender APIs without JVM restrictions | 156 |
 moeinfatehi/backup-finder | An extension for Burp Suite designed to scan webservers for sensitive backup files | 160 |
 p3gleg/pwnback | Generates a sitemap of a website using Wayback Machine | 225 |
 doyensec/burpdeveltraining | Training materials and code examples for developing Burp Suite extensions in Java to automate security testing | 347 |
 wagiro/burpbounty | A tool that allows users to enhance and customize the vulnerability scanning capabilities of Burp Suite using a graphical interface. | 1,685 |
 daffainfo/match-replace-burp | A collection of Burp Suite rules for identifying and exploiting vulnerabilities in web applications | 340 |
 yandex/burp-molly-pack | Security checks pack for Burp Suite that extends its functionality with plugins containing active and passive security checks. | 138 |