discover nemesida/waf-bypass report and recheck detected bypassed cURL requests to write SecRules for them - viktorefimov2002-bot/waf-bypass-automation

Agent Exos — terminal AI agent with 10 tools (WAF bypass bridge, client-side tool-calling), rebranded opencode engine - BlackXV2vip/agent-exos

Web CTF challenge — SQL injection WAF evasion, schema enumeration, and AES credential decryption. - Sofia6002/CTF_SQL_Injection_Bypass

CVE-2026-6875 ServiceNow Pre-Auth RCE Framework 🔥 JS Injection → Sandbox Escape → RCE → Root. Features: --detect, --exec, reverse/interactive shell, batch threading, WAF bypass, persistence, latera...

Complete guide to run Claude Code CLI & VS Code with AgentRouter using a WAF bypass proxy - marko1olo/agentrouter-setup-guide

A Python script for vulnerability scanning with double encoding and WAF bypass capabilities. - hemalathasriram96-pentester/Script

Authorized bug bounty & security research writeups — methodology, recon, and detection-bypass case studies. - afuckingco/security-writeups

Batch media scraper with Turnstile/WAF bypass, parallel downloads, CapSolver integration, and cross-platform compatibility. - rhaffle87/scrAPE

An open redirect exists on YouTube due to lack of input validation on redirect parameters. An attacker can craft a link to bypass domain whitelists and force users onto external malicious sites. Th...

This repository provides a complete, pre-configured environment for web hacking practice, including the classic **SQLi-Labs** and integrated **WAF Bypass Labs** (Java/Tomcat), all running seamlessl...

XSS discovery pipeline with WAF bypass — chains katana, dalfox, and wafw00f with DOM sink analysis and source map detection. - fexx301/xss-scan

Multi-Layer Security Bypass Framework — CDN/WAF/CAPTCHA/Bot Detection pentesting toolkit - farhanturu/axiom

GoHunt é um framework de Bug Bounty em Go. Ele orquestra Reconhecimento Passivo/Ativo, Diffing diário, Fuzzing inteligente, Extração de Segredos e Bypass de 403. Com alta concorrência e alertas via...

A static analysis tool that detects polyglot files -files simultaneously valid in multiple formats - used to bypass file upload validators and WAF filters. - potterpk/typebleed

Sequential SQL Injection Agent with Reinforcement Learning Adaptive WAF bypass via Q-learning over a sequential mutation policy. - robyfirnandoyusuf/SeqSQLi

Auto-bypass for blocked websites in Claude Code — Phase 0→3 adaptive scheduler, no API keys - fivetaku/insane-search

High-performance multi-threaded web reconnaissance tool. Features advanced HCDN/WAF bypass, SPA baseline detection, and contextual fuzzing logic to identify sensitive leaks without the noise. - asy...

Java library for easy integration with the API of 2captcha captcha solving service to bypass recaptcha, funcaptcha, geetest and solve any other captchas. - 2captcha/2captcha-java

Python 3 package for easy integration with the API of 2captcha captcha solving service to bypass recaptcha, сloudflare turnstile, funcaptcha, geetest and solve any other captchas. - 2captcha/2captc...

CLI & GUI tool, it is WAF/CDN fingerprinting and bypass validation tool for pentesting across cloud providers. It detects 17+ WAFs and 12+ CDNs, runs 35+ bypass/evasion techniques with base...