0xInfection/Awesome-WAF resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

7592 stars · 1176 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A curated awesome-list collecting everything about Web Application Firewalls (WAFs) from a security perspective, including how they work, detection and fingerprinting techniques, evasion methods, known bypasses, and related tools, papers, and writeups. It is aimed at penetration testers and security researchers rather than being a runnable tool itself.

Use cases

• learn how web application firewalls work
• find tools to detect and fingerprint WAFs
• research WAF bypass and evasion techniques
• prepare for pentesting a web app behind a WAF
• find papers and talks on WAF security
• build a WAF testing methodology

When to choose

• you are a pentester or researcher needing a comprehensive WAF reference
• you want a curated starting point for WAF detection, fingerprinting, or bypass research
• you need links to tools, papers, and writeups about WAFs in one place

When to avoid

• you need an actual WAF product to deploy and protect an application
• you want runnable software rather than a curated list of resources
• you need guaranteed up-to-date bypasses for a specific WAF vendor

Facets

learning-resource · maturity active

security penetration-testing vulnerability-scanning developer-tools security penetration-testing web-development awesome-lists cross-platform awesome-list waf web-application-firewall waf-bypass waf-detection evasion-techniques infosec curated-resources

Member repositories

For agents

markdown · JSON · MCP: product_card(name="0xInfection/Awesome-WAF")