Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Projects in Awesome Lists tagged with bypass

A curated list of projects in awesome lists tagged with bypass .

https://github.com/gtfobins/gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

binaries bind-shell blueteam bypass exfiltration gtfobins linux post-exploitation redteam reverse-shell unix

Last synced: 14 May 2025

https://github.com/GTFOBins/GTFOBins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

binaries bind-shell blueteam bypass exfiltration gtfobins linux post-exploitation redteam reverse-shell unix

Last synced: 13 Mar 2025

https://github.com/screetsec/thefatrat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

accessibility antivirus autorun backdoor bypass bypass-av bypassantivirus dracos hacking kali-linux linux malware metasploit-framework msfvenom rat remote remote-access thefatrat tool trojan

Last synced: 13 May 2025

https://github.com/screetsec/TheFatRat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

accessibility antivirus autorun backdoor bypass bypass-av bypassantivirus dracos hacking kali-linux linux malware metasploit-framework msfvenom rat remote remote-access thefatrat tool trojan

Last synced: 28 Mar 2025

https://github.com/Screetsec/TheFatRat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

accessibility antivirus autorun backdoor bypass bypass-av bypassantivirus dracos hacking kali-linux linux malware metasploit-framework msfvenom rat remote remote-access thefatrat tool trojan

Last synced: 27 Mar 2025

https://github.com/mr-xn/penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

authentication-bypass bypass cobalt-strike csrf csrf-webshell cve cve-cms exploit getshell oa-getshell penetration-testing penetration-testing-poc php-bypass poc poc-exp rce sql-getshell sql-poc thinkphp

Last synced: 27 Mar 2025

https://github.com/Mr-xn/Penetration_Testing_POC

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

authentication-bypass bypass cobalt-strike csrf csrf-webshell cve cve-cms exploit getshell oa-getshell penetration-testing penetration-testing-poc php-bypass poc poc-exp rce sql-getshell sql-poc thinkphp

Last synced: 13 Mar 2025

https://github.com/k8gege/k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

0day brute-force bypass crack database exp exploit getshell hacking lpe netscan password pentest poc privilege-escalation rce scanner

Last synced: 13 May 2025

https://github.com/k8gege/K8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

0day apt brute-force bypass crack database exploit getshell hacking netscan password pentest poc privilege-escalation scanner

Last synced: 30 Mar 2025

https://github.com/everywall/ladder

Selfhosted alternative to 12ft.io. and 1ft.io bypass paywalls with a proxy ladder and remove CORS headers from any URL

bypass cors cors-proxy paywall paywall-blocker paywall-bypasser

Last synced: 14 May 2025

https://github.com/esrrhs/pingtunnel

Pingtunnel is a tool that send TCP/UDP traffic over ICMP

bypass docker icmp icmp-traffic ping pingtunnel socks5 tcp tcp-pingtunnel traffic tunnel udp udp-traffic wifi

Last synced: 14 May 2025

https://github.com/matro7sh/bypassav

This map lists the essential techniques to bypass anti-virus and EDR

av bypass edr markdown mindmap pentest redteam

Last synced: 13 Apr 2025

https://github.com/ekultek/whatwaf

Detect and bypass web application firewalls and protection systems

bypass detection fingerprinting firewall waf web-application web-application-firewall web-application-firewall-bypassing

Last synced: 18 Oct 2025

https://github.com/Ekultek/WhatWaf

Detect and bypass web application firewalls and protection systems

bypass detection fingerprinting firewall waf web-application web-application-firewall web-application-firewall-bypassing

Last synced: 26 Mar 2025

https://github.com/matro7sh/BypassAV

This map lists the essential techniques to bypass anti-virus and EDR

av bypass edr markdown mindmap pentest redteam

Last synced: 30 Mar 2025

https://github.com/voorivex/pentest-guide

Penetration tests guide based on OWASP including test cases, resources and examples.

bugbounty bypass owasp-tests payload penetration-testing pentest vulnerability writeup

Last synced: 23 Mar 2025

https://github.com/Voorivex/pentest-guide

Penetration tests guide based on OWASP including test cases, resources and examples.

bugbounty bypass owasp-tests payload penetration-testing pentest vulnerability writeup

Last synced: 12 Mar 2025

https://github.com/tegal1337/cilocks

Crack Interface lockscreen, Metasploit and More Android/IOS Hacking

android-hacking bruteandroid bypass bypass-lockscreen geolocation ios-hacking ip-logger lockscreen webcam-capture

Last synced: 25 Mar 2025

https://github.com/tegal1337/CiLocks

Crack Interface lockscreen, Metasploit and More Android/IOS Hacking

android-hacking bruteandroid bypass bypass-lockscreen geolocation ios-hacking ip-logger lockscreen webcam-capture

Last synced: 28 Mar 2025

https://github.com/zerodytrash/Simple-YouTube-Age-Restriction-Bypass

A simple browser extension to bypass YouTube's age verification, disable content warnings and watch age restricted videos without having to sign in!

bypass hacktoberfest tampermonkey unblocker userscript youtube youtube-player

Last synced: 15 Apr 2025

https://github.com/zerodytrash/simple-youtube-age-restriction-bypass

A simple browser extension to bypass YouTube's age verification, disable content warnings and watch age restricted videos without having to sign in!

bypass hacktoberfest tampermonkey unblocker userscript youtube youtube-player

Last synced: 14 May 2025

https://github.com/M2TeamArchived/NSudo

[Deprecated, work in progress alternative: https://github.com/M2Team/NanaRun] Series of System Administration Tools

accesscheck administration bypass devilmode integritylevel launcher nsudo ntapi privileges process session system token trustedinstaller windows

Last synced: 02 Apr 2025

https://github.com/m2teamarchived/nsudo

[Deprecated, work in progress alternative: https://github.com/M2Team/NanaRun] Series of System Administration Tools

accesscheck administration bypass devilmode integritylevel launcher nsudo ntapi privileges process session system token trustedinstaller windows

Last synced: 28 Sep 2025

https://github.com/api0cradle/UltimateAppLockerByPassList

The goal of this repository is to document the most common techniques to bypass AppLocker.

applocker awl blueteam bypass purpleteam redteam rules

Last synced: 15 Apr 2025

https://github.com/api0cradle/ultimateapplockerbypasslist

The goal of this repository is to document the most common techniques to bypass AppLocker.

applocker awl blueteam bypass purpleteam redteam rules

Last synced: 15 May 2025

https://github.com/swagkarna/defeat-defender-v1.2.0

Powerful batch script to dismantle complete windows defender protection and even bypass tamper protection ..Disable Windows-Defender Permanently....Hack windows. POC

antivirus av-evasion batch bypass bypass-antivirus bypass-defender defender disable-windows-defender dropper fud hack-tool hacking hackwindows malware malware-dropper payload proof-of-concept undetectable

Last synced: 05 Jan 2026

https://github.com/swagkarna/Defeat-Defender-V1.2.0

Powerful batch script to dismantle complete windows defender protection and even bypass tamper protection ..Disable Windows-Defender Permanently....Hack windows. POC

antivirus av-evasion batch bypass bypass-antivirus bypass-defender defender disable-windows-defender dropper fud hack-tool hacking hackwindows malware malware-dropper payload proof-of-concept undetectable

Last synced: 05 May 2025

https://github.com/ge0rg3/requests-ip-rotator

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

apigateway aws bugbounty bypass hacktoberfest ip networking security security-tools web-security

Last synced: 13 Apr 2025

https://github.com/Ge0rg3/requests-ip-rotator

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

apigateway aws bugbounty bypass hacktoberfest ip networking security security-tools web-security

Last synced: 13 Apr 2025

https://github.com/1234567Yang/cf-proxy-ex

Cloudflare超级代理，无服务器代理，Duckduckgo代理（可用AI聊天，包含GPT4o/Calude3），Github加速，支持解锁Libgen，在线代理。现已支持多平台部署。Cloudflare super proxy, setting up a free serverless proxy by using Cloudflare worker, support Duckduckgo / Libgen. Now you can deploy this project on different platforms.

bypass cloudflare-proxy cloudflare-reverse-proxy cloudflare-workers free-proxy github-proxy goguardian online-proxy reverse-proxy

Last synced: 24 Mar 2025

https://github.com/virb3/trustmealready

🔓 Disable SSL verification and pinning on Android, system-wide

android bypass module pinning root ssl xposed

Last synced: 27 Sep 2025

https://github.com/ViRb3/TrustMeAlready

🔓 Disable SSL verification and pinning on Android, system-wide

android bypass module pinning root ssl xposed

Last synced: 12 Mar 2025

https://github.com/devploit/nomore403

🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.

403 403-bypass bugbounty bypass ctf go http pentest pentesting reconnaissance security tool waf-bypass websec

Last synced: 10 May 2025

https://github.com/danny-dasilva/cycletls

Spoof TLS/JA3 fingerprints in GO and Javascript

bypass fingerprint fingerprinting go golang http http2 https ja3 javascript js tls typescript

Last synced: 14 May 2025

https://github.com/hlldz/spookflare

Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.

antivirus-evasion antivirus-testing av-bypass av-evasion bypass dropper endpoint-bypass loader obfuscation

Last synced: 02 Apr 2025

https://github.com/hlldz/SpookFlare

Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.

antivirus-evasion antivirus-testing av-bypass av-evasion bypass dropper endpoint-bypass loader obfuscation

Last synced: 11 Jul 2025

https://github.com/Danny-Dasilva/CycleTLS

Spoof TLS/JA3 fingerprints in GO and Javascript

bypass fingerprint fingerprinting go golang http http2 https ja3 javascript js tls typescript

Last synced: 27 Mar 2025

https://github.com/quiteafancyemerald/holy-unblocker

Holy Unblocker LTS is a web proxy service that helps you access websites that may be blocked by your network or policy extensions all within your browser with no download or setup. It does this securely and with additional privacy features. Browse Tor/Onion sites in any browser, hide browsing activity and bypass filters. (Star if you fork it!!!)

adblocking backend browsersync bypass bypass-recaptchav3 fastify frontend https-proxy javascript node nodejs onion-service proxy socks5-proxy tor trending unblocker vpn webproxy websocket

Last synced: 13 May 2025

https://github.com/Pizz33/GobypassAV-shellcode

shellcode免杀加载器，使用go实现，免杀bypass火绒、360、核晶、def等主流杀软

bypass cobaltstrike redteam shellcode shellcode-loader

Last synced: 04 Apr 2025

https://github.com/pizz33/gobypassav-shellcode

shellcode免杀加载器，使用go实现，免杀bypass火绒、360、核晶、def等主流杀软

bypass cobaltstrike redteam shellcode shellcode-loader

Last synced: 04 Apr 2025

https://github.com/chaitin/blazehttp

BlazeHTTP 是一款简单易用的 WAF 防护效果测试工具。BlazeHTTP stands as a user-friendly WAF protection efficacy evaluation tool.

benchmark bypass http-parser waf waf-test web-application-firewall

Last synced: 16 May 2025

https://github.com/yqcs/zhetian

::ZheTian / 强大的免杀生成工具，Bypass All.

bypass bypass-antivirus cobalt-strike msf shellcode trojan zhetian

Last synced: 15 May 2025

https://github.com/yqcs/ZheTian

::ZheTian / 强大的免杀生成工具，Bypass All.

bypass bypass-antivirus cobalt-strike msf shellcode trojan zhetian

Last synced: 11 Jul 2025

https://github.com/hyukisback/karma-ddos

DDoS Script (DDoS Panel) with Multiple Bypass ( Cloudflare UAM,CAPTCHA,BFM,NOSEC / DDoS Guard / Google Shield / V Shield / Amazon / etc.. )

amazon-bypass attack bypass cloudflare cloudflare-bypass cloudflarebypass ddos ddos-attacks ddosguard-bypass layer7 layer7bypass python

Last synced: 12 Apr 2025

https://github.com/HyukIsBack/KARMA-DDoS

DDoS Script (DDoS Panel) with Multiple Bypass ( Cloudflare UAM,CAPTCHA,BFM,NOSEC / DDoS Guard / Google Shield / V Shield / Amazon / etc.. )

amazon-bypass attack bypass cloudflare cloudflare-bypass cloudflarebypass ddos ddos-attacks ddosguard-bypass layer7 layer7bypass python

Last synced: 02 Apr 2025

https://github.com/nccgroup/BurpSuiteHTTPSmuggler

A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques

burpsuite burpsuite-extender bypass waf

Last synced: 19 Apr 2025

https://github.com/nccgroup/burpsuitehttpsmuggler

A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques

burpsuite burpsuite-extender bypass waf

Last synced: 05 Apr 2025

https://github.com/YagamiiLight/Cerberus

一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能

bypass hacking-tool middleware penetration-testing proxy python security-tools sql-injection ssrf waf websecurity xss

Last synced: 15 May 2025

https://github.com/zer0condition/ReverseKit

x64 Dynamic Reverse Engineering Toolkit

bypass hook imgui imports reverseengineering syscalls

Last synced: 30 Mar 2025

https://github.com/ffffffff0x/pentest101

一些关于渗透测试的Tips

blueteam bypass ffffffff0x linux pentest pentest-tool redteam

Last synced: 05 Apr 2025

https://github.com/ffffffff0x/Pentest101

一些关于渗透测试的Tips

blueteam bypass ffffffff0x linux pentest pentest-tool redteam

Last synced: 11 Jul 2025

https://github.com/0xcuso4/dhlyk

大灰狼远控木马 V9.5 源码

bypass dhl gh0st gui hack pentest rat shellcode

Last synced: 10 Apr 2025

https://github.com/0xlane/bypassuac

Use ICMLuaUtil to Bypass UAC!

bypass bypass-uac bypassuac red-team uac windows

Last synced: 06 Apr 2025

https://github.com/mgeeky/Stracciatella

OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at startup

amsi bypass opsec powershell redteam sharppick unmanaged

Last synced: 19 Apr 2025

https://github.com/mgeeky/stracciatella

OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at startup

amsi bypass opsec powershell redteam sharppick unmanaged

Last synced: 05 Apr 2025

https://github.com/gfw4fun/x-ui-pro

XUI-PRO nginx reverse proxy with ws/grpc/httpupgrade/splithttp,xray protocol support: vless,vmess,trojan,shadowsocks panel cloudflare ssl,xtls,ssr,v2fly,v2ray installer bypass restrictions sing-box,shadowtls,reality,tunnel,gfw tor warp wireguard geoip tuic clash vpn mihomo psiphon hy2 oneclick argo bbr wstunnel anticensorship⚡🛡️

bypass cloudflare great-firewall haproxy nginx psiphon reverse-proxy shadowsocks tor tunnel v2raya wireguard wstunnel x-ui-pro xray xui xui-pro

Last synced: 15 May 2025

https://github.com/M4DM0e/DirDar

DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it

bug-bounty bugcrowd bypass dir-listing forbiddens golang hackerone hacking pentest

Last synced: 10 May 2025

https://github.com/xHossein/PyPasser

Bypassing reCaptcha V3 by sending HTTP requests & solving reCaptcha V2 using speech to text engine.

bypass bypass-invisible-recaptcha bypass-recaptcha-v2 bypasscaptcha google-recaptcha google-recaptcha-v3 re-captcha recaptcha recaptcha-v2 recaptcha-v3

Last synced: 13 Apr 2025

https://github.com/zfc-digital/cf-clearance-scraper

This library was created for testing and training purposes to retrieve the page source of websites, create Cloudflare Turnstile tokens and create Cloudflare WAF sessions.

bypass cf-clearance cloudflare cloudflare-scrape cloudflare-scraper scraper-api

Last synced: 23 Oct 2025

https://github.com/hexhacking/xDL

:fire: xDL is an enhanced implementation of the Android DL series functions.

android bypass debugging-symbol dlopen dlsym dynamic-symbol linker native symbol symbols

Last synced: 27 Mar 2025

https://github.com/bo0om/php_imap_open_exploit

Bypassing disabled exec functions in PHP (c) CRLF

0day bypass exploit imap php

Last synced: 07 Apr 2025

https://github.com/Bo0oM/PHP_imap_open_exploit

Bypassing disabled exec functions in PHP (c) CRLF

0day bypass exploit imap php

Last synced: 09 Jul 2025

https://github.com/p0dalirius/ipsourcebypass

This Python script can be used to bypass IP source restrictions using HTTP headers.

bugbounty bypass headers http ip pentesting python tool

Last synced: 16 May 2025

https://github.com/sondernextdoor/poseidon

Stealthy UM <-> KM communication system without creating any system threads, permanent hooks, driver objects, section objects or device objects

anticheat bypass communication kernel mode read usermode write

Last synced: 12 Aug 2025

https://github.com/sondernextdoor/Poseidon

Stealthy UM <-> KM communication system without creating any system threads, permanent hooks, driver objects, section objects or device objects

anticheat bypass communication kernel mode read usermode write

Last synced: 12 Apr 2025

https://github.com/padovah4ck/PSByPassCLM

Bypass for PowerShell Constrained Language Mode

bypass c-sharp constraint-language installutil powershell powershell-language-mode

Last synced: 19 Apr 2025

https://github.com/Warflop/CloudBunny

CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.

bypass censys pentest pentest-tools proxy shodan waf zoomeye

Last synced: 10 May 2025

https://github.com/warflop/cloudbunny

CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.

bypass censys pentest pentest-tools proxy shodan waf zoomeye

Last synced: 05 Apr 2025

https://github.com/beordle/termtunnel

Cross-platform terminal tunnel tool

bastion-tools bypass jump-server lrzsz proxy ssh terminal tunnel

Last synced: 13 Apr 2025