Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Miosa-osa/OSA --skill offensive-waf-bypassgit clone --depth 1 https://github.com/Miosa-osa/OSAWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/miosa-osa/osa/offensive-waf-bypass)<a href="https://agentmods.dev/skills/miosa-osa/osa/offensive-waf-bypass"><img src="https://agentmods.dev/badge/skills/miosa-osa/osa/offensive-waf-bypass/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/miosa-osa/osa/offensive-waf-bypass"><img src="https://agentmods.dev/badge/skills/miosa-osa/osa/offensive-waf-bypass.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00068 | $0.09915 |
| Opus 5.5 | $0.00027 | $0.03966 |
| Sonnet 5.5 | $0.00014 | $0.01983 |
| Haiku 4.5 | $0.00007 | $0.00992 |
Grade C, and why
offensive-waf-bypass scanned grade C with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Encoded or obfuscated payloadmediumSupply chain
base64 or hex that is decoded and executed hides what actually runs from anyone reading the file.
<script>eval(atob('YWxlcnQoMSk='))</script> Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Cloud metadata endpointmediumServer-side request forgery
One request to 169.254.169.254 can return temporary IAM credentials.
- SSRF: Headers like `X-Forwarded-For` or `X-Real-IP` can be manipulated to target internal IPs (e.g., `169.254.169.254` for AWS metadata service). Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- **Example with `curl`**: This is a copy
94% identical to offensive-waf-bypass — 53 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
How it starts
The opening of the file, as written. The whole thing — 852 lines — stays where its author put it; the contents beside it link to each section on GitHub.
SKILL: WAF Bypass Techniques
Metadata
- Skill Name: waf-bypass
- Folder: offensive-waf-bypass
- Source: https://github.com/SnailSploit/offensive-checklist/blob/main/waf-bypass.md
Description
WAF bypass techniques checklist: encoding bypass (URL/HTML/Unicode/double encoding), case variation, comment injection, HTTP header manipulation, chunked encoding, IP rotation, timing attacks, and payload obfuscation per WAF vendor. Use when WAF is blocking payloads during web app tests.
Trigger Phrases
Use this skill when the conversation involves any of:
WAF bypass, web application firewall bypass, URL encoding, double encoding, Unicode bypass, comment injection, HTTP header bypass, chunked encoding, IP rotation, payload obfuscation, WAF evasion
Full Methodology
WAF Bypass Techniques
A Web Application Firewall (WAF) is a security tool that protects web applications from various attacks by analyzing HTTP requests and applying rules to identify and block suspicious traffic. This document outlines effective techniques to bypass WAF protections during security assessments.
graph TD
A[Client] -->|HTTP Request| B[WAF]
B -->|Filtered Request| C[Web Application]
C -->|Response| D[WAF]
D -->|Filtered Response| A
E[Attacker] -->|Malicious Request| B
B -->|Blocked| E
F[Attacker with<br>Bypass Techniques] -->|Obfuscated<br>Malicious Request| B
B -->|Request Appears Legitimate| C
style B fill:#f9a,stroke:#333,color:#333
style E fill:#f66,stroke:#333,color:#333
style F fill:#f66,stroke:#333,color:#333
WAF Overview
WAFs operate in two primary models:
- Negative Model (Blacklist-based): Uses pre-set signatures to block known malicious requests, effective against common vulnerabilities
- Positive Model (Whitelist-based): Only allows requests that match specific patterns, blocking everything else by default
Popular WAFs
- Cloudflare - Identified by
__cf_bm,cf_clearance,cf_chl_*cookies and "/cdn-cgi/" routes (cookies rotate roughly every 30 min) - Akamai
- Imperva/Incapsula - Look for "X-CDN: Incapsula" headers
- AWS WAF - Commonly sets
AWSALBorAWSALBCORScookies - Sucuri - Check for "X-Sucuri-ID" headers
- DataDome
- F5 Networks
- Barracuda
- Fortinet
- ModSecurity - Open-source WAF, commonly used with Apache
- NAXSI - Open-source WAF for NGINX
- Azure Front Door
- Fastly Next-Gen WAF
- Cloudflare AI WAF
- Radware
- Coraza - Modern open‑source WAF written in Go
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 852 lines · 68 tokens per session scan C 927d9ca2fc3b
offensive-waf-bypass is a skill published in the GitHub repository Miosa-osa/OSA (78 stars, last pushed 11d ago), licensed Apache-2.0. It adds 68 tokens to every session and 9,915 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it C with 3 findings (encoded or obfuscated payload, cloud metadata endpoint, makes network calls). It is 94% identical to offensive-waf-bypass, differing in 53 lines, and is treated as a copy.
Other skills, from other repositories
n8n-mcp-workflows
MCP-first patterns for designing, validating, and operating n8n automations with explicit retries, failure paths, and audit trails.
fastapi-patterns
FastAPI patterns for async APIs, dependency injection, Pydantic request and response models, OpenAPI docs, tests, security, and production readiness.
status
Show whether Mem0 memory is working in this repository, covering configuration, capture state, pending flushes, and whether the Mem0 API key is valid. Use when the user asks whether memory is on, why a memory is missing, or anything looks broken.
open-source
Documentation reference for writing Python code using the browser-use open-source library. Use this skill whenever the user needs help with Agent, Browser, or Tools configuration, is writing code that imports from browseruse, asks about @sandbox deployment, supported LLM models, Actor API, custom tools, lifecycle…
mem0-oss-to-platform
Plan, then execute, a migration of a project from the mem0 open-source / self-hosted SDK (local Memory class) to the mem0 Platform / hosted SDK (MemoryClient). TRIGGER when: the developer wants to move, switch, or migrate mem0 off OSS/self-hosted to the hosted API, e.g. "migrate my mem0 setup to the platform", "switch…
stripe-docs
Use when the user or agent needs to read, search, or look up Stripe documentation or API reference. Prefer this over curl or WebFetch for any docs.stripe.com content. Use to fetch gated documentation.