Alternatives and similar repositories for govwa

Users that are interested in govwa are comparing it to the libraries listed below

• Contrast-Security-OSS / go-test-bench
  Intentionally vulnerable Go web app.
  ☆43Updated this week
• lair-framework / go-nmap
  Nmap XML parsing library for Go
  ☆101Updated 2 years ago
• dzonerzy / goWAPT
  Go Web Application Penetration Test
  ☆347Updated 8 months ago
• secvulture / dvta
  Damn Vulnerable Thick Client App
  ☆149Updated 4 years ago
• staaldraad / xxeserv
  A mini webserver with FTP support for XXE payloads
  ☆332Updated last year
• bayotop / off-by-slash
  Burp extension to detect alias traversal via NGINX misconfiguration at scale.
  ☆259Updated 3 years ago
• doyensec / safeurl
  A Server Side Request Forgery (SSRF) protection library. Made with 🖤 by Doyensec LLC.
  ☆101Updated last year
• ameenmaali / qsfuzz
  qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.
  ☆301Updated 2 years ago
• audibleblink / gorsh
  A toy CTF Golang Reverse Shell w/ a Tmux-driven psuedo-C2 Interface
  ☆87Updated last month
• ONsec-Lab / scripts
  Utils
  ☆267Updated 9 years ago
• evilsocket / dirsearch
  A Go implementation of dirsearch.
  ☆280Updated 3 years ago
• ZeddYu / HTTP-Smuggling-Lab
  Use HTTP Smuggling Lab to learn HTTP Smuggling.
  ☆349Updated 2 years ago
• NickstaDB / DeserLab
  Java deserialization exploitation lab.
  ☆236Updated 6 years ago
• GoSecure / template-injection-workshop
  Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.
  ☆125Updated 2 years ago
• h3xstream / http-script-generator
  ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
  ☆291Updated 2 years ago
• PortSwigger / command-injection-attacker
  SHELLING - a comprehensive OS command injection payload generator
  ☆108Updated 5 years ago
• teknogeek / ssrf-sheriff
  A simple SSRF-testing sheriff written in Go
  ☆327Updated 6 months ago
• devoteam-cybertrust / burpcollaborator-docker
  This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard cer…
  ☆287Updated 4 months ago
• mbechler / serianalyzer
  A static byte code analyzer for Java deserialization gadget research
  ☆243Updated 8 years ago
• digininja / authlab
  A lab to play with authentication and authorisation problems
  ☆95Updated 2 years ago
• aquasecurity / vuln-list-update
  ☆182Updated last week
• zaproxy / zap-api-go
  ZAP Go API
  ☆61Updated 10 months ago
• joernchen / xxeserve
  XXE Out of Band Server.
  ☆170Updated last year
• adamyordan / cve-2019-1003000-jenkins-rce-poc
  Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (…
  ☆314Updated 6 years ago
• Static-Flow / BurpSuite-Team-Extension
  This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes …
  ☆259Updated 2 years ago
• irsdl / httpninja
  HTTP.ninja
  ☆151Updated last year
• Regala / burp-scope-monitor
  Burp Suite Extension to monitor new scope
  ☆197Updated 4 years ago
• appsecco / defcon-26-workshop-attacking-and-auditing-docker-containers
  DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source
  ☆108Updated 5 years ago
• kapytein / jsonp
  jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints.
  ☆152Updated 4 years ago
• andresriancho / websocket-fuzzer
  HTML5 WebSocket message fuzzer
  ☆146Updated 6 years ago