View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0009815 | Kali Linux | New Tool Requests | public | 2026-08-03 11:06 | 2026-08-03 11:08 |
| Reporter | Skokooi | Assigned To | |||
| Priority | normal | Severity | minor | Reproducibility | have not tried |
| Status | new | Resolution | open | ||
| Summary | 0009815: imcurvin - An Advanced WAF Bypass and Lightweight PoC Tool | ||||
| Description | [Name] - imcurvin [Version] - 1.3.0 [Homepage] - https://github.com/Skokoo/ImCurvin [Download] - https://github.com/Skokoo/ImCurvin/releases/tag/v1.3.0 [Author] - Skokoo [Licence] - Apache 2.0 [Description] - ImCurvin is an Advanaced Waf Bypass with Waf Exhaustion Technique and Proof-of-Concept Framework. Via direct kernel-level telemetry, this framework operates with an exceptionally low footprint of only 0000017:0000012 MB RAM and utilizes complete Zero Disk I/O Optimization (13% CPU Usage on my phone). [Dependencies] - tor, xxd, curl, coreutils, python3 [Similar tools] - There is probably no tool exactly like this. The closest ones might be tools like "waf-bypass" or "WAFtester" because they share a similar concept of firewall testing. However, sqlmap is definitely not similar because the MySQL time-based injection used in my tool is merely a "sacrificial payload vector" for testing purposes, and I could easily swap it out for something else. [Activity] - The project started in 2026 and is active upstream with a mature development cycle consisting of over 600+ commits. [How to install] - Users can easily download the pre-built .deb package directly from the GitHub Releases page, or install it via PyPI using pip. [How to use] - Basic commands to demonstrate the framework: [Packaged] - Yes, the tool is already pre-packaged for Debian compliance using automated pipelines. | ||||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2026-08-03 11:06 | Skokooi | New Issue |