Alternatives and similar repositories for oauth-scan

Users that are interested in oauth-scan are comparing it to the libraries listed below

• mschwager / route-detect
  Find authentication (authn) and authorization (authz) security bugs in web application routes.
  ☆274Updated 3 weeks ago
• usdAG / FlowMate
  FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application a…
  ☆163Updated 2 weeks ago
• akabe1 / OAUTHScan
  Burp Suite Extension useful to verify OAUTHv2 and OpenID security
  ☆175Updated 11 months ago
• securisec / cliam
  Cloud agnostic IAM permissions enumerator
  ☆157Updated 5 months ago
• pry0cc / proteus
  A projectdiscovery driven attack surface monitoring bot powered by axiom
  ☆190Updated 3 years ago
• hakluke / hakscale
  Distribute ordinary bash commands over many systems
  ☆168Updated 3 years ago
• trufflesecurity / of-CORS
  ☆152Updated 2 years ago
• shabarkin / aws-enumerator
  The AWS Enumerator was created for service enumeration and info dumping for investigations of penetration testers during Black-Box testin…
  ☆229Updated 3 years ago
• doyensec / PESD-Exporter-Extension
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams
  ☆105Updated 8 months ago
• forcesunseen / graphquail
  Burp Suite extension that offers a toolkit for testing GraphQL endpoints.
  ☆196Updated last year
• DevSecOpsDocs / nuclearpond
  Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.
  ☆185Updated last year
• tristanlatr / burpa
  Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used t…
  ☆250Updated last month
• cybervelia / graphicator
  A GraphQL enumeration and extraction tool
  ☆133Updated 2 years ago
• securebinary / firebaseExploiter
  FirebaseExploiter is a vulnerability discovery tool that discovers Firebase Database which are open and can be exploitable. Primarily bui…
  ☆165Updated 2 years ago
• The-Login / DNS-Analysis-Server
  Tools to assess DNS security.
  ☆152Updated last year
• PortSwigger / pentest-mapper
  A Burp Suite Extension for Application Penetration Testing to map flows and vulnerabilities
  ☆120Updated last year
• pussycat0x / malicious-pdf
  Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator
  ☆168Updated 4 years ago
• stolenusername / cowitness
  CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to …
  ☆125Updated last year
• hahwul / authz0
  🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.
  ☆422Updated 2 weeks ago
• raverrr / plution
  Prototype pollution scanner using headless chrome
  ☆219Updated 3 years ago
• jhaddix / awsScrape
  A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.
  ☆236Updated last year
• pry0cc / tew
  A quick ‘n dirty nmap parser written in Golang to convert nmap xml to IP:Port notation.
  ☆128Updated last year
• trickest / dsieve
  Filter and enrich a list of subdomains by level
  ☆211Updated 2 years ago
• intruder-io / guidtool
  A tool to inspect and attack version 1 GUIDs
  ☆235Updated 2 years ago
• projectdiscovery / openrisk
  openrisk is a tool that generates a risk score based on the results of a Nuclei scan.
  ☆176Updated last week
• trickest / find-gh-poc
  Find CVE PoCs on GitHub
  ☆153Updated 2 months ago
• cyprosecurity / API-SecurityEmpire
  API Security Project aims to present unique attack & defense methods in API Security field
  ☆287Updated 3 years ago
• elttam / semgrep-rules
  ☆200Updated 11 months ago
• JaimePolop / RExpository
  ☆95Updated last year
• PortSwigger / splitting-the-email-atom
  ☆85Updated 3 months ago