Alternatives and similar repositories for OWASP-Web-Checklist:

Users that are interested in OWASP-Web-Checklist are comparing it to the libraries listed below

• tanprathan / OWASP-Testing-Checklist
  OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and p…
  ☆1,548Updated 2 years ago
• hackerscrolls / SecurityTips
  ☆993Updated 3 years ago
• mandatoryprogrammer / xsshunter
  The XSS Hunter service - a portable version of XSSHunter.com
  ☆1,512Updated 2 years ago
• nahamsec / lazyrecon
  This script is intended to automate your reconnaissance process in an organized fashion
  ☆1,950Updated 3 years ago
• tomnomnom / httprobe
  Take a list of domains and probe for working HTTP and HTTPS servers
  ☆2,950Updated 8 months ago
• jdonsec / AllThingsSSRF
  This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location
  ☆1,240Updated 4 years ago
• imran-parray / Mind-Maps
  Mind-Maps of Several Things
  ☆2,511Updated last year
• tomnomnom / assetfinder
  Find domains and subdomains related to a given domain
  ☆3,154Updated 8 months ago
• snoopysecurity / awesome-burp-extensions
  A curated list of amazingly awesome Burp Extensions
  ☆3,078Updated last week
• Voorivex / pentest-guide
  Penetration tests guide based on OWASP including test cases, resources and examples.
  ☆2,537Updated 2 years ago
• swisskyrepo / GraphQLmap
  GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)
  ☆1,440Updated 11 months ago
• nahamsec / bbht
  A script to set up a quick Ubuntu 17.10 x64 box with tools I use.
  ☆1,184Updated 7 months ago
• harsh-bothra / learn365
  This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.
  ☆1,633Updated 2 years ago
• tomnomnom / waybackurls
  Fetch all the URLs that the Wayback Machine knows about for a domain
  ☆3,714Updated 9 months ago
• OWASP / wstg
  The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
  ☆7,651Updated last month
• tomnomnom / hacks
  A collection of hacks and one-off scripts
  ☆2,191Updated last year
• tomnomnom / meg
  Fetch many paths for many hosts - without killing the hosts
  ☆1,625Updated last year
• arainho / awesome-api-security
  A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the communit…
  ☆3,178Updated 2 months ago
• adon90 / pentest_compilation
  Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios
  ☆1,331Updated 2 years ago
• OWASP / OWASP-VWAD
  This repo is no longer in use. Please refer to https://github.com/OWASP/www-project-vulnerable-web-applications-directory
  ☆877Updated 3 months ago
• bugcrowd / HUNT
  ☆2,238Updated last year
• dwisiswant0 / awesome-oneliner-bugbounty
  A collection of awesome one-liner scripts especially for bug bounty tips.
  ☆2,775Updated 6 months ago
• jhaddix / tbhm
  The Bug Hunters Methodology
  ☆4,006Updated last year
• wagiro / BurpBounty
  Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…
  ☆1,708Updated 9 months ago
• kaiiyer / awesome-vulnerable
  A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.
  ☆1,055Updated 3 weeks ago
• hakluke / weaponised-XSS-payloads
  XSS payloads designed to turn alert(1) into P1
  ☆1,349Updated last year
• six2dez / pentest-book
  ☆1,646Updated 3 weeks ago
• wirasecure / pentest-notes
  ☆1,535Updated last year
• EdOverflow / can-i-take-over-xyz
  "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
  ☆5,030Updated 2 weeks ago
• sushiwushi / bug-bounty-dorks
  List of Google Dorks for sites that have responsible disclosure program / bug bounty program
  ☆1,359Updated last year