How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
XSStrike is a security tool designed to detect cross-site scripting vulnerabilities through parameter fuzzing and web response analysis. It functions as a web application fuzzer and vulnerability scanner that identifies injection points and security flaws. The project includes a specialized utility for detecting blind XSS, where payloads execute asynchronously or on separate pages. It also features a JavaScript library auditor to identify outdated libraries with known vulnerabilities and a dedicated tool for identifying and bypassing web application firewalls using various evasion techniques.
Add headers to all Burp requests to bypass some WAF products
A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
use a headless webkit/browser (PhantomJS) to obtain the values of WAF-injected cookies which are calculated in the browser by client-side JavaScript code and then add them to Burp's cookie jar - selectively remove specific cookies from Burp's cookie jar - empty Burp's cookie jar, for example to…
The main features of bao7uo/waf-cookie-fetcher are: WAF Bypass Tools.
Projects with overlapping indexed features include: ultimatehackers/xsstrike — XSStrike is a security tool designed to detect cross-site scripting vulnerabilities through parameter fuzzing and web… codewatchorg/bypasswaf — Add headers to all Burp requests to bypass some WAF products. leveryd/x-waf. nccgroup/burpsuitehttpsmuggler — A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques.