Example Usage
# EvilWAF generates a local CA to intercept HTTPS traffic. Trust it once.

# Run EvilWAF first — CA is auto-generated at startup
# Then find the cert:
ls /tmp/evilwaf_ca_*/evilwaf-ca.pem

# Linux — trust system-wide
sudo cp /tmp/evilwaf_ca_*/evilwaf-ca.pem /usr/local/share/ca-certificates/evilwaf-ca.crt
sudo update-ca-certificates

# macOS
sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain \
  /tmp/evilwaf_ca_*/evilwaf-ca.pem

# For tools like sqlmap, pass --ignore-proxy=False or equivalent for your tool.
See also
cve-search_mcp
Open Source

A Model Context Protocol (MCP) server for querying the CVE-Search API…
xhunter
Free

Android Penetration Tool [ RAT for Android ]…
MSSprinkler
Open Source

MSSprinkler is a password spraying utility for organizations to test their Microsoft Online accounts…
username-anarchy
Open Source Kali

Username tools for penetration testing…
ntlm_theft
Open Source

Creates malicious files (LNK, SCF, PDF, DOCX, etc.) that force a Windows system to authenticate to a…
Responder (NBT-NS Poisoner)
Open Source Kali

Rogue authentication server and LLMNR/NBT-NS/mDNS poisoner for Windows networks. Captures NTLM chall…