bypass-firewalls-by-DNS-history

Bypass detection tool

Automatically identifies potential bypass points around web application firewalls (WAFs) by analyzing DNS history records and HTTP responses.

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

GitHub

1k stars
31 watching
263 forks
Language: Shell
last commit: about 4 years ago
bugbountybypassingdns-recordnetwork-securitysecuritysecurity-tools

Related projects:

RepositoryDescriptionStars
julianjm/waf_bypaddAn extension that bypasses Web Application Firewalls by padding HTTP requests with dummy data4
anirudhbiyani/findmytakeoverDetects DNS record misconfigurations that could be exploited by attackers135
projectdiscovery/dnsxA tool for querying and manipulating DNS records2,218
bohops/ultimatewdacbypasslistA centralized resource for bypassing Windows Device Guard Application Whitelisting (WDAC) policies.489
the-login/dns-analyzerA tool to analyze DNS vulnerabilities in web applications and identify potential security risks.94
0xerr0r/blockyA DNS proxy and ad-blocker for local networks with advanced features for performance, security, and configuration.4,855
darryllane/blutoTools for gathering information about and exploiting vulnerabilities in domains620
codewatchorg/bypasswafAn extension that automatically adds headers to Burp requests to bypass certain Web Application Firewall products.330
tyranid/deviceguardbypassesProvides bypasses and tools to analyze Windows 10's Device Guard restrictions133
neuralegion/wafalyzerA utility that analyzes HTTP responses to detect the presence of firewalls in web applications.34
trya9ain/bypassadduserA C# tool to bypass Windows user account management limitations by exploiting configuration settings.46
pizz33/gobypassav-shellcodeA tool for creating shellcode bypasses of antivirus software823
faizann24/fwaf-machine-learning-driven-web-application-firewallAn application designed to detect and prevent malicious queries on web applications using machine learning algorithms.422
allyomalley/dnsobserverA tool to monitor DNS interactions and send notifications about suspicious activity.189