Alternatives and similar repositories for OWASPWebGoatPHP:

Users that are interested in OWASPWebGoatPHP are comparing it to the libraries listed below

• designsecurity / progpilot
  A static analysis tool for security
  ☆335Updated last month
• dustyfresh / PHP-vulnerability-audit-cheatsheet
  This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabi…
  ☆349Updated 6 years ago
• qazbnm456 / awesome-security-trivia
  🤙 Security Trivia that rare people know.
  ☆157Updated 5 years ago
• OWASP / AppSec-Browser-Bundle
  The OWASP AppSec Browser Bundle is an open source Linux based penetration testing browser bundle built over Mozilla Firefox. It comes pre…
  ☆93Updated 11 years ago
• oshp / headers
  An application to catch, search and analyze HTTP secure headers.
  ☆64Updated 3 years ago
• secdec / attack-surface-detector-burp
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆99Updated last year
• tijme / angularjs-csti-scanner
  Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.
  ☆307Updated 3 years ago
• EdOverflow / proof-of-concepts
  A little collection of fun and creative proof of concepts to demonstrate the potential impact of a security vulnerability.
  ☆162Updated 5 years ago
• cujanovic / CRLF-Injection-Payloads
  Payloads for CRLF Injection
  ☆221Updated 3 months ago
• incredibleindishell / CORS-vulnerable-Lab
  Sample vulnerable code and its exploit code
  ☆189Updated 3 years ago
• davevs / dvxte
  Damn Vulnerable eXtensive Training Environment
  ☆102Updated 2 years ago
• Cleveridge / cleveridge-subdomain-scanner
  The Cleveridge Subdomain Scanner finds subdomains of a given domain.
  ☆36Updated 4 years ago
• commixproject / commix-testbed
  A collection of web pages, vulnerable to command injection flaws.
  ☆177Updated last year
• hvqzao / liffy
  Local File Inclusion Exploitation Tool (mirror)
  ☆124Updated 7 years ago
• immunIT / drupwn
  Drupal enumeration & exploitation tool
  ☆592Updated 4 years ago
• daeken / SSRFTest
  SSRF testing tool
  ☆243Updated 2 years ago
• koenbuyens / securityheaders
  Check any website (or set of websites) for insecure security headers.
  ☆244Updated last year
• daudmalik06 / ReconCat
  A small Php application to fetch archive url snapshots from archive.org. using it you can fetch complete list of snapshot urls of any yea…
  ☆80Updated 6 years ago
• robocoder / rips-scanner
  RIPS - A static source code analyser for vulnerabilities in PHP scripts
  ☆313Updated 3 years ago
• ajinabraham / WebAppSec
  Web Application Security
  ☆125Updated 7 months ago
• security-prince / Resources-for-Application-Security
  Some good resources for getting started with application security
  ☆140Updated 3 years ago
• devoteam-cybertrust / burpcollaborator-docker
  This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard cer…
  ☆281Updated this week
• zseano / JS-Scan
  a .js scanner, built in php. designed to scrape urls and other info
  ☆211Updated 7 years ago
• LunaM00n / File-Upload-Lab
  Damn Vulnerable File Upload V 1.1
  ☆98Updated 6 years ago
• amolnaik4 / bodhi
  Bodhi - Client-side Vulnerability Playground
  ☆117Updated 3 years ago
• securityidiots / CollabOzark
  CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE, External Resource Access payloads triggers.
  ☆138Updated 5 years ago
• security-checklist / php-security-check-list
  PHP Security Check List [ EN ] 🌋 ☣️
  ☆298Updated 5 years ago
• ZephrFish / Wordlists
  Various Payload wordlists
  ☆234Updated 4 years ago
• mpgn / heartbleed-PoC
  Hearbleed exploit to retrieve sensitive information CVE-2014-0160
  ☆82Updated 3 years ago
• Hacker0x01 / h1-212-ctf-solutions
  A collection of the solutions people wrote for the H1-212 Capture The Flag event
  ☆95Updated 6 years ago