Alternatives and similar repositories for OFFAT:

Users that are interested in OFFAT are comparing it to the libraries listed below

• jthack / ffufai
  AI-powered ffuf wrapper
  ☆468Updated 5 months ago
• intigriti / misconfig-mapper
  Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/o…
  ☆708Updated 2 weeks ago
• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆634Updated last week
• dub-flow / sessionprobe
  SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applic…
  ☆449Updated last year
• theowni / Damn-Vulnerable-RESTaurant-API-Game
  Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethica…
  ☆664Updated 3 weeks ago
• RedTeamOperations / RedCloud-OS
  RedCloudOS is a Cloud Adversary Simulation Operating System for Red Teams to assess the Cloud Security of Leading Cloud Service Providers…
  ☆630Updated 10 months ago
• RevoltSecurities / SubProber
  Subprober is a powerful and efficient subdomain scanning tool written in Python. With the ability to handle large lists of subdomains. Th…
  ☆248Updated 3 months ago
• raoshaab / Pen-Andro
  Script to Automate installtion of Apps ,frida server and moving Burpsuite certificate to root folder
  ☆264Updated last year
• lauritzh / domscan
  Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.
  ☆237Updated 2 months ago
• c0dejump / HExHTTP
  Header Exploitation HTTP
  ☆497Updated 3 weeks ago
• AggressiveUser / AllForOne
  AllForOne allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories,
  ☆638Updated last year
• h4r5h1t / webcopilot
  An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for …
  ☆1,214Updated 9 months ago
• g0ldencybersec / CloudRecon
  ☆481Updated 11 months ago
• Edr4 / XSS-Bypass-Filters
  ☆536Updated 10 months ago
• x1trap / websec-answers
  Websec interview questions by tib3rius answered
  ☆307Updated last year
• duty1g / subcat
  Lightning-fast passive subdomain discovery tool for security professionals and bug bounty hunters.
  ☆284Updated last month
• sysdig / wafer
  ☆199Updated 11 months ago
• attacksurge / ax
  The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning—On Your Terms. Easily distribute arbit…
  ☆468Updated this week
• sAjibuu / Upload_Bypass
  A simple tool for bypassing file upload restrictions.
  ☆838Updated 9 months ago
• RevoltSecurities / Subdominator
  SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty
  ☆580Updated last month
• factionsecurity / faction
  Pen Test Report Generation and Assessment Collaboration
  ☆516Updated last month
• gotr00t0day / Gsec
  Web Security Scanner
  ☆315Updated 11 months ago
• lucsemassa / github_cves_search
  Find CVEs associated to Linux and public exploits on github
  ☆117Updated 2 weeks ago
• HuntDownProject / HEDnsExtractor
  A suite for hunting suspicious targets, expose domains and phishing discovery
  ☆358Updated this week
• 0xPugal / SubDomz
  An Automated Subdomain Enumeration Tool
  ☆261Updated 6 months ago
• Hari-prasaanth / Web-App-Pentest-Checklist
  A OWASP Based Checklist With 500+ Test Cases
  ☆730Updated 2 years ago
• pwndoc-ng / pwndoc-ng
  Pentest Report Generator
  ☆404Updated last week
• CyberSecurityUP / GCP-Pentest-Checklist
  ☆239Updated 3 months ago
• CyberSecurityUP / Python-for-Security
  ☆315Updated 9 months ago
• assetnote / nowafpls
  Burp Plugin to Bypass WAFs through the insertion of Junk Data
  ☆1,097Updated 3 months ago