Alternatives and similar repositories for web-app-exploitation

Users that are interested in web-app-exploitation are comparing it to the libraries listed below

• TROUBLE-1 / White-box-pentesting
  This lab is created to demonstrate pass-the-hash, blind sql and SSTI vulnerabilities
  ☆92Updated last year
• v1ll41n / H1-Report-Finder
  A burpsuite extension that helps security researchers find public security reports published on h1 based on the selected host
  ☆42Updated 5 years ago
• drak3hft7 / OSCP-Exam-Report-Template
  Template used for my OSCP exam.
  ☆28Updated 2 years ago
• purabparihar / Web-Application-Pentest-Checklist
  ☆22Updated 3 years ago
• fuzz-security / Active-Directory-Exploitation-Cheat-Sheet
  A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
  ☆50Updated 4 years ago
• b0n1t0 / gSAST
  gSAST - Grep Static Analysis Security Tool
  ☆13Updated last year
• yogisec / VulnerableSAMLApp
  Vulnerable SAML infrastructure training applicaiton
  ☆54Updated 2 years ago
• c0brabaghdad1 / DVPA
  Damn Vulnerable PHP Application (DVPA) - It is Lab Written in The PHP lang, Which Contains PHP Type Juggling - RCE Challenges
  ☆32Updated 3 years ago
• OdinF13 / Bug-Bounty-Scripts
  Script for Bug Bounty
  ☆28Updated 3 years ago
• RxXwx3x / OSWE
  ☆20Updated 3 years ago
• m0chan / pwk-cheatsheet
  ☆49Updated 7 years ago
• hassan0x / ReconHunter
  Attack Surface Discovery Tool
  ☆108Updated 8 months ago
• Vanshal / AWAE-PREP
  ☆17Updated 4 years ago
• 0xb1tByte / eWPTXv1-Journey
  This repository is intended for sharing files/tools/tutorials..etc that related to eWPTXv1 from eLearnSecurity
  ☆23Updated 5 years ago
• austinsonger / OSCP
  Tracking my journey towards earning my OSCP. This includes the process of everything that I learn along the way.
  ☆47Updated 3 years ago
• Dheerajmadhukar / karma_v1
  KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…
  ☆59Updated 3 years ago
• VitthalS / ivna
  Intentionally Vulnerable Nodejs Application & APIs
  ☆22Updated 3 years ago
• h4ckboy19 / XXE_A_TO_Z
  ☆44Updated 3 years ago
• w4fz5uck5 / OSWE
  OSWE Preparation
  ☆37Updated 6 years ago
• EasyRecon / wappaGo
  ☆57Updated last year
• iamthefrogy / bucketbunny
  AWS S3 open bucket poc automated script.
  ☆57Updated 3 years ago
• k3nundrum / CRTP
  Notes for CRTP
  ☆40Updated 4 years ago
• botesjuan / PenTestMethodology
  Penetration Test Methodology
  ☆17Updated last month
• InsiderPhD / Arjun
  HTTP parameter discovery suite.
  ☆63Updated 5 years ago
• ch1r0n1n / testing-notes
  ☆21Updated 2 years ago
• MantisSTS / GoCloud
  Checks whether a domain is hosted on a cloud service such as AWS, Azure or CloudFlare
  ☆59Updated 2 years ago
• redhuntlabs / Log4JHunt
  An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.
  ☆43Updated 4 months ago
• GovTech-CSG / Autowasp
  BurpSuite Extension: A one-stop pen testing checklist and logger tool
  ☆75Updated 2 years ago
• noraj / AWAE-OSWE
  ☆27Updated 4 years ago
• MistSpark / DNS-Wordlists
  part of my wordlist to bruteforce DNS to find subdoamains.
  ☆61Updated 3 years ago