View Issue Details

IDProjectCategoryView StatusLast Update
0009815Kali LinuxNew Tool Requestspublic2026-08-03 11:08
ReporterSkokooi Assigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
Status newResolutionopen 
Summary0009815: imcurvin - An Advanced WAF Bypass and Lightweight PoC Tool
Description

[Name] - imcurvin

[Version] - 1.3.0

[Homepage] - https://github.com/Skokoo/ImCurvin

[Download] - https://github.com/Skokoo/ImCurvin/releases/tag/v1.3.0

[Author] - Skokoo

[Licence] - Apache 2.0

[Description] - ImCurvin is an Advanaced Waf Bypass with Waf Exhaustion Technique and Proof-of-Concept Framework. Via direct kernel-level telemetry, this framework operates with an exceptionally low footprint of only 0000017:0000012 MB RAM and utilizes complete Zero Disk I/O Optimization (13% CPU Usage on my phone).

[Dependencies] - tor, xxd, curl, coreutils, python3

[Similar tools] - There is probably no tool exactly like this. The closest ones might be tools like "waf-bypass" or "WAFtester" because they share a similar concept of firewall testing. However, sqlmap is definitely not similar because the MySQL time-based injection used in my tool is merely a "sacrificial payload vector" for testing purposes, and I could easily swap it out for something else.

[Activity] - The project started in 2026 and is active upstream with a mature development cycle consisting of over 600+ commits.

[How to install] - Users can easily download the pre-built .deb package directly from the GitHub Releases page, or install it via PyPI using pip.

[How to use] - Basic commands to demonstrate the framework:
To get a list of basic option:
imcurvin -h

[Packaged] - Yes, the tool is already pre-packaged for Debian compliance using automated pipelines.

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2026-08-03 11:06 Skokooi New Issue