waf-detection 开源项目推荐（53 个）

s0md3v /XSStrike

Most advanced XSS scanner.

0xInfection /Awesome-WAF

Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

stanislav-web /OpenDoor

OWASP 网络侦查与目录发现平台

Raghavd3v /CRLFsuite

The most powerful CRLF injection (HTTP Response Splitting) scanner.

Lu1sDV /wafmeow

wafw00f's fingerprints. Go speed. Pipeline-native. WAF detection from live HTTP and offline captures.

kh4sh3i /WAF-Bypass

🔥 Web application firewalls (WAF) bypass

Jackeriss /one-scan

多合一网站指纹扫描器，轻松获取网站的 IP / DNS 服务商 / 子域名 / HTTPS 证书 / WHOIS / 开发框架 / WAF 等信息

theghostshinobi /waf-stressor

Production-grade Web Application Firewall testing tool. Detects Cloudflare, AWS WAF, Akamai & more. Identifies bypass vectors via URL normalization. Perfect for bug bounty & pentesting.

Zeyad-Azima /WAF_Bypass_Guide

Guide For WAF Bypass Techniques

rafashaalfiandi /XSSentinel

Focused XSS fuzz scanner with smart payloads, reflection analysis, CSP checks, WAF hints, DOM sink detection, and optional browser validation.

farinap5 /webpwn

Web Vulnerability Detector (XSS,SQL,LFI,XST,WAF)

e-m3din4 /domain-a-tricks

A Domain-Recon Automated Tool.

theoffsecgirl /webxray

Offensive web scanner: crawling, XSS, SQLi, headers and WAF bypass

egnake /ghost-waf

Advanced Web Application Firewall (WAF) detection and bypass testing tool. Identifies WAFs (Cloudflare, AWS, Imperva) and tests evasion techniques automatically.

SUmidcyber /GhostScans

A lightweight command-line network scanning tool designed for cybersecurity expenses and network payments. Port scanning, service disruption and vulnerability detection with user-friendly menus.

TEAMBCS /Fire-Eye

A next-generation Firewall, CDN & WAF Fingerprinting Framework for Security Researchers, Bug Hunters, and Penetration Testers.

dogukankurnaz /XSS_Scanner

XSS Scanner Shell/Bash

arif-offsec /captcharecon

CAPTCHA & Anti-Automation Reconnaissance Toolkit for authorised web app pentesting.

nizarsaidi-exe /SOC-ITSM-Platform

Production-grade, multi-container SOC Automation & ITSM Platform. Integrates Wazuh SIEM alert ingestion, SafeLine WAF defense, n8n SOAR workflows, multi-channel Slack notifications, Active Directory LDAPS authentication, and an RBAC incident ticketing dashboard (FastAPI + React).

kh4sh3i /FortiWeb

FortiWeb is a web application firewall (WAF)