A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
الميزات الرئيسية لـ nccgroup/burpsuitehttpsmuggler هي: Authentication and Bypass, Proxy Tool Extensions, WAF Bypass Tools, Waf Evasion.
تشمل البدائل مفتوحة المصدر لـ nccgroup/burpsuitehttpsmuggler: codewatchorg/bypasswaf — Add headers to all Burp requests to bypass some WAF products. c0ny1/chunked-coding-converter — Burp suite 分块传输辅助插件. assetnote/nowafpls — Burp Plugin to Bypass WAFs through the insertion of Junk Data. ultimatehackers/xsstrike — XSStrike is a security tool designed to detect cross-site scripting vulnerabilities through parameter fuzzing and web… audi-1/sqli-labs — sqli-labs is a collection of intentionally vulnerable web applications and sandbox environments designed for… bao7uo/waf-cookie-fetcher — use a headless webkit/browser (PhantomJS) to obtain the values of WAF-injected cookies which are calculated in the…
Add headers to all Burp requests to bypass some WAF products
Burp suite 分块传输辅助插件
Burp Plugin to Bypass WAFs through the insertion of Junk Data
sqli-labs is a collection of intentionally vulnerable web applications and sandbox environments designed for practicing the identification and exploitation of SQL injection vulnerabilities. It serves as a cybersecurity education lab where users can experiment with database exploits in a controlled setting. The environment provides specialized modules for testing a wide range of attack vectors, including error-based, boolean-blind, and time-based injections. It specifically covers advanced techniques such as second-order injections, stacked queries, and attacks targeting HTTP headers. The pro