Alternatives and similar repositories for oauth-scan

Users that are interested in oauth-scan are comparing it to the libraries listed below

• mschwager / route-detect
  Find authentication (authn) and authorization (authz) security bugs in web application routes.
  ☆280Updated last month
• akabe1 / OAUTHScan
  Burp Suite Extension useful to verify OAUTHv2 and OpenID security
  ☆174Updated last year
• securisec / cliam
  Cloud agnostic IAM permissions enumerator
  ☆156Updated 6 months ago
• tristanlatr / burpa
  Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used t…
  ☆278Updated last month
• The-Login / DNS-Analysis-Server
  Tools to assess DNS security.
  ☆153Updated last year
• shabarkin / aws-enumerator
  The AWS Enumerator was created for service enumeration and info dumping for investigations of penetration testers during Black-Box testin…
  ☆231Updated 3 years ago
• trufflesecurity / of-CORS
  ☆153Updated 2 years ago
• usdAG / FlowMate
  FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application a…
  ☆163Updated 2 weeks ago
• pry0cc / proteus
  A projectdiscovery driven attack surface monitoring bot powered by axiom
  ☆191Updated 3 years ago
• pussycat0x / malicious-pdf
  Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator
  ☆168Updated 4 years ago
• hakluke / hakscale
  Distribute ordinary bash commands over many systems
  ☆168Updated 3 years ago
• PortSwigger / pentest-mapper
  A Burp Suite Extension for Application Penetration Testing to map flows and vulnerabilities
  ☆120Updated last year
• PortSwigger / autowasp
  BurpSuite Extension: A one-stop pen testing checklist and logger tool
  ☆267Updated 2 years ago
• raverrr / plution
  Prototype pollution scanner using headless chrome
  ☆219Updated 3 years ago
• doyensec / PESD-Exporter-Extension
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams
  ☆106Updated 8 months ago
• cyprosecurity / API-SecurityEmpire
  API Security Project aims to present unique attack & defense methods in API Security field
  ☆288Updated 3 years ago
• DevSecOpsDocs / nuclearpond
  Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.
  ☆185Updated last year
• cybervelia / graphicator
  A GraphQL enumeration and extraction tool
  ☆133Updated 2 years ago
• projectdiscovery / openrisk
  openrisk is a tool that generates a risk score based on the results of a Nuclei scan.
  ☆176Updated last week
• forcesunseen / graphquail
  Burp Suite extension that offers a toolkit for testing GraphQL endpoints.
  ☆195Updated last year
• jhaddix / awsScrape
  A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.
  ☆235Updated last year
• NotSoSecure / cloud-service-enum
  ☆259Updated last year
• GoSecure / xxe-workshop
  Workshop given at Hack in Paris 2019
  ☆124Updated 2 years ago
• hahwul / authz0
  🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.
  ☆424Updated last month
• cramppet / regulator
  Automated learning of regexes for DNS discovery
  ☆373Updated 2 years ago
• securebinary / firebaseExploiter
  FirebaseExploiter is a vulnerability discovery tool that discovers Firebase Database which are open and can be exploitable. Primarily bui…
  ☆166Updated 2 years ago
• trickest / find-gh-poc
  Find CVE PoCs on GitHub
  ☆153Updated 2 months ago
• Sh1Yo / request_smuggler
  Http request smuggling vulnerability scanner
  ☆229Updated 3 years ago
• dhn / udon
  A simple tool that helps to find assets/domains based on the Google Analytics ID.
  ☆177Updated 9 months ago
• usdAG / cstc
  CSTC is a Burp Suite extension that allows request/response modification using a GUI analogous to CyberChef
  ☆250Updated this week