offensive-waf-bypass

What problem does it solve?

Detect and document WAF bypass opportunities to assess defense robustness against evasion tactics and to inform remediation.

Core Features & Use Cases

• Technique catalog: encoding bypass (URL/HTML/Unicode/double encoding), case variation, and comment injection
• HTTP and network tricks: header manipulation, chunked encoding, IP rotation, timing attacks, payload obfuscation
• Use Case: During a red-team exercise, identify which bypass techniques the target WAF blocks and document actionable mitigations.

Quick Start

Load this skill and follow the steps to apply WAF bypass techniques against the target and document findings.