identYwaf

identYwaf is an identification tool that can recognize web protection type i.e. WAF based on blind inference. Blind inference is being done by inspecting responses provoked by a set of predefined offensive non-destructive payloads, where those are used only to trigger the web protection system in...

XSSYA

XSSYA-V2.0 已发布 - 查看 https://github.com/yehia-mamdouh/XSSYA-V-2.0 XSSYA 是一款跨站脚本扫描器与漏洞确认工具（支持两种方法） • 方法一：通过请求和响应进行确认 • 方法二：执行编码后的载荷，并在网页 HTML 代码中搜索解码后的相同载荷 • 支持 HTTPS • 确认后可执行载荷以获取 Cookie • 识别 3 种 WAF（ModSecurity - WebKnight - F5 BIG IP） • 可在（Windows - Linux）上运行 XSSYA 拥有持续更新的编码载荷库，用于绕过 WAF（Web 应用防火...

XSSYA v2.0 - Cross Site Scripting Scanner & Vulnerability Confirmation

XSSYA Cross Site Scripting Scanner & Vulnerability Confirmation written in python scripting language confirm the XSS Vulnerability in two method first work by execute the payload encoded to bypass Web Application Firewall which is the first method request and responseif it respond 200 it turn...