Alternatives and similar repositories for web-app-exploitation

Users that are interested in web-app-exploitation are comparing it to the libraries listed below

• TROUBLE-1 / White-box-pentesting
  This lab is created to demonstrate pass-the-hash, blind sql and SSTI vulnerabilities
  ☆91Updated 2 years ago
• drak3hft7 / OSCP-Exam-Report-Template
  Template used for my OSCP exam.
  ☆30Updated 3 years ago
• six2dez / obsidian-pentesting-vault
  Sample Obsidian's vault for web pentesting
  ☆98Updated last year
• yogisec / VulnerableSAMLApp
  Vulnerable SAML infrastructure training applicaiton
  ☆53Updated 2 years ago
• 0xbharath / slurp
  A blazing fast & feature rich Amazon S3 bucket enumerator.
  ☆98Updated 3 years ago
• Vanshal / AWAE-PREP
  ☆17Updated 4 years ago
• v1ll41n / H1-Report-Finder
  A burpsuite extension that helps security researchers find public security reports published on h1 based on the selected host
  ☆42Updated 5 years ago
• nightangel26 / resources
  A curated list of different pentesting resources
  ☆29Updated 3 years ago
• kleiton0x00 / CRLF-one-liner
  A simple Bash one liner with aim to automate CRLF vulnerability scanning.
  ☆69Updated 5 years ago
• hassan0x / ReconHunter
  Attack Surface Discovery Tool
  ☆109Updated 11 months ago
• fuzz-security / Active-Directory-Exploitation-Cheat-Sheet
  A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
  ☆50Updated 5 years ago
• chennylmf / OWASP-Web-App-Pentesting-checklists
  ☆71Updated 4 years ago
• k3nundrum / CRTP
  Notes for CRTP
  ☆41Updated 4 years ago
• GainSec / TreeHouse-Wordlists
  Wordlist for Hacking, Penetration Testing, Vulnerability Assessments and More
  ☆63Updated last year
• rinetd / BurpSuite-1
  BurpSuite using the document and some extensions
  ☆70Updated 5 years ago
• VitthalS / ivna
  Intentionally Vulnerable Nodejs Application & APIs
  ☆22Updated 3 years ago
• Fearless523 / Buffer-Overflow
  A Buffer Overflow checklist, with plug-and-play pre-written python scripts.
  ☆33Updated 4 years ago
• purabparihar / Web-Application-Pentest-Checklist
  ☆22Updated 4 years ago
• InsiderPhD / Arjun
  HTTP parameter discovery suite.
  ☆63Updated 5 years ago
• AutoSecurityy / Kiosk-Hacking
  ☆20Updated 3 years ago
• m0chan / pwk-cheatsheet
  ☆51Updated 8 years ago
• iamthefrogy / bucketbunny
  AWS S3 open bucket poc automated script.
  ☆57Updated 4 years ago
• pry0cc / tew
  A quick ‘n dirty nmap parser written in Golang to convert nmap xml to IP:Port notation.
  ☆128Updated last year
• am0nt31r0 / Penetration-Testing-Mind-Map
  To help you go through the pentesting phases and the tools each phase can have. Some pratical examples of the tools are present too.
  ☆47Updated 6 years ago
• c0brabaghdad1 / DVPA
  Damn Vulnerable PHP Application (DVPA) - It is Lab Written in The PHP lang, Which Contains PHP Type Juggling - RCE Challenges
  ☆32Updated 3 years ago
• MantisSTS / GoCloud
  Checks whether a domain is hosted on a cloud service such as AWS, Azure or CloudFlare
  ☆59Updated 2 years ago
• EasyRecon / wappaGo
  ☆57Updated last year
• Cyber-Guy1 / theCyberGuy_Recon_V1.0
  ☆94Updated 3 years ago
• ch1r0n1n / testing-notes
  ☆21Updated 2 years ago
• victoni / Bug-Bounty-Scripts
  The scripts I write to help me on my bug bounty hunting
  ☆122Updated 3 years ago