evilwaf. evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).