waf-bypass

Detect WAFs and apply encoding, header, and protocol bypass techniques.

2.9k|469|Updated Mar 4, 2026
One-click install
npx skills add https://github.com/SnailSploit/Claude-Red --skill waf-bypass
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: waf-bypass
Source: https://github.com/SnailSploit/Claude-Red/tree/main/Skills/offensive-waf-bypass
Command: npx skills add https://github.com/SnailSploit/Claude-Red --skill waf-bypass

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps security professionals overcome Web Application Firewall (WAF) protections that block legitimate security testing payloads, enabling thorough vulnerability assessments.

Core Features & Use Cases

  • WAF Detection & Fingerprinting: Identifies common WAFs and their detection methods.
  • Diverse Bypass Techniques: Covers encoding, header manipulation, protocol-level tricks, and more.
  • Use Case: When a WAF blocks your SQL injection payload, use this Skill to apply various encoding and obfuscation techniques until the payload is accepted by the WAF and processed by the web application.

Quick Start

Use the waf-bypass skill to apply URL encoding techniques to bypass Cloudflare.

Frequently Asked Questions about waf-bypass

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I bypass a Web Application Firewall when it blocks my SQL injection payloads?

Bypass a Web Application Firewall by applying payload obfuscation techniques like URL encoding and header manipulation until the WAF accepts the SQL injection payload and the web application processes it.

What techniques are used for WAF detection and fingerprinting during penetration testing?

WAF detection and fingerprinting identify common Web Application Firewalls and their specific detection methods, enabling security professionals to map protections before selecting appropriate evasion strategies.

How does HTTP smuggling work as a protocol-level bypass for web application firewalls?

HTTP smuggling achieves protocol bypass by manipulating HTTP requests to exploit inconsistencies in how Web Application Firewalls and backend servers process protocol boundaries.

Can I use payload obfuscation to bypass Cloudflare WAF protections?

Yes, bypass Cloudflare by applying URL encoding and other payload obfuscation techniques to alter malicious payloads so they evade detection while remaining processable by the target web application.

What is the best way to evade WAF blocks for XSS security testing payloads?

Evade WAF blocks for XSS payloads by combining encoding, header manipulation, and protocol-level bypasses to obfuscate the malicious script content and bypass the firewall inspection layer.

When should I use protocol-level bypasses instead of payload encoding for WAF evasion?

Use protocol-level bypasses like HTTP smuggling when payload encoding and header manipulation fail to bypass WAF protections, as protocol exploits target firewall parsing logic rather than payload content.