https://github.com/waf-bypass-maker/waf-community-bypasses

https://github.com/waf-bypass-maker/waf-community-bypasses

Last synced: 3 months ago
JSON representation

• Host: GitHub
• URL: https://github.com/waf-bypass-maker/waf-community-bypasses
• Owner: waf-bypass-maker
• License: gpl-3.0
• Created: 2020-10-26T22:55:44.000Z (about 4 years ago)
• Default Branch: main
• Last Pushed: 2024-06-26T23:36:19.000Z (6 months ago)
• Last Synced: 2024-06-27T03:07:41.225Z (6 months ago)
• Size: 156 KB
• Stars: 381
• Watchers: 13
• Forks: 92
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# WAF community bypasses

Web Application Firewalls a.k.a. WAF are garbage.

All the vendors, from the cheapest Cloudflare to "enterpise" like Imperva, Akamai, F5, Checkpoint, or Fortinet are just cheating with their customers by delivering 0 actual protection. 

99.9% of WAF signatures are just RegExps written 10-15 years ago 

To prove this, we put Twitter payloads with community bypasses  to the CSV list you can check.

Don't trust WAF vendors, but test them.