3 dépôts
Utilities designed to identify the presence and type of web application firewalls protecting a target.
Distinct from Web Application Firewalls: Focuses on the identification (fingerprinting) of the firewall rather than just the bypassing of it.
Explore 3 awesome GitHub repositories matching security & cryptography · Firewall Detection Tools. Refine with filters or upvote what's useful.
XSStrike is a security tool designed to detect cross-site scripting vulnerabilities through parameter fuzzing and web response analysis. It functions as a web application fuzzer and vulnerability scanner that identifies injection points and security flaws. The project includes a specialized utility for detecting blind XSS, where payloads execute asynchronously or on separate pages. It also features a JavaScript library auditor to identify outdated libraries with known vulnerabilities and a dedicated tool for identifying and bypassing web application firewalls using various evasion techniques.
Identifies the presence of security filters and applies specific evasion techniques to bypass them.
reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio
Includes utilities designed to identify the presence and type of web application firewalls protecting a target.
WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
Detects whether a website is protected by a WAF using normal and malicious request patterns.