Alternatives and similar repositories for wstg

Users that are interested in wstg are comparing it to the libraries listed below

• OWASP / Top10
  Official OWASP Top 10 Document Repository
  ☆4,738Updated last month
• ticarpi / jwt_tool
  A toolkit for testing, tweaking and cracking JSON Web Tokens
  ☆6,049Updated 3 months ago
• 0xRadi / OWASP-Web-Checklist
  OWASP Web Application Security Testing Checklist
  ☆1,976Updated 3 years ago
• payloadbox / xss-payload-list
  🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
  ☆7,453Updated last year
• fuzzdb-project / fuzzdb
  Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
  ☆8,659Updated last year
• OWASP / Nettacker
  Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
  ☆4,430Updated last week
• tanprathan / OWASP-Testing-Checklist
  OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and p…
  ☆1,663Updated 2 years ago
• EdOverflow / bugbounty-cheatsheet
  A list of interesting payloads, tips and tricks for bug bounty hunters.
  ☆6,236Updated last year
• OWASP / ASVS
  Application Security Verification Standard
  ☆3,154Updated 2 weeks ago
• KathanP19 / HowToHunt
  Collection of methodology and test case for various web vulnerabilities.
  ☆6,581Updated 2 months ago
• ffuf / ffuf
  Fast web fuzzer written in Go
  ☆14,592Updated 4 months ago
• arainho / awesome-api-security
  A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the communit…
  ☆3,389Updated 4 months ago
• vavkamil / awesome-bugbounty-tools
  A curated list of various bug bounty tools
  ☆5,258Updated last week
• owasp-amass / amass
  In-depth attack surface mapping and asset discovery
  ☆13,468Updated 3 weeks ago
• xmendez / wfuzz
  Web application fuzzer
  ☆6,260Updated last year
• Tib3rius / AutoRecon
  AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
  ☆5,656Updated 3 months ago
• devanshbatham / Awesome-Bugbounty-Writeups
  A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
  ☆5,292Updated 2 years ago
• six2dez / reconftw
  reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findin…
  ☆6,688Updated 2 months ago
• s0md3v / Arjun
  HTTP parameter discovery suite.
  ☆5,826Updated 6 months ago
• 1N3 / IntruderPayloads
  A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and…
  ☆3,840Updated 3 years ago
• OWASP / API-Security
  OWASP API Security Project
  ☆2,199Updated 7 months ago
• urbanadventurer / WhatWeb
  Next generation web scanner
  ☆6,022Updated 3 weeks ago
• jhaddix / tbhm
  The Bug Hunters Methodology
  ☆4,134Updated 2 years ago
• payloadbox / command-injection-payload-list
  🎯 Command Injection Payload List
  ☆3,475Updated last year
• Ignitetechnologies / Privilege-Escalation
  This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.
  ☆3,470Updated 2 years ago
• yogeshojha / rengine
  reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via E…
  ☆8,112Updated 6 months ago
• hahwul / dalfox
  🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
  ☆4,486Updated last week
• EdOverflow / can-i-take-over-xyz
  "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
  ☆5,317Updated 6 months ago
• Voorivex / pentest-guide
  Penetration tests guide based on OWASP including test cases, resources and examples.
  ☆2,660Updated 3 years ago
• j3ssie / osmedeus
  A Workflow Engine for Offensive Security
  ☆5,853Updated 3 weeks ago