Alternatives and similar repositories for pentest-mapper

Users that are interested in pentest-mapper are comparing it to the libraries listed below

• osmedeus / osmedeus-base
  Build your own reconnaissance system with Osmedeus Next Generation
  ☆199Updated 4 months ago
• Anof-cyber / Pentest-Mapper
  A Burp Suite Extension for pentester and bug bounty hunters an to maintain checklist, map flows, write test cases and track vulnerabiliti…
  ☆118Updated 2 years ago
• dbrwsky / Nuclei-BurpExtension
  Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.
  ☆120Updated 2 years ago
• PortSwigger / auth-analyzer
  ☆109Updated last year
• 0xmoot / s3sec
  Check AWS S3 instances for read/write/delete access
  ☆122Updated 3 years ago
• pry0cc / proteus
  A projectdiscovery driven attack surface monitoring bot powered by axiom
  ☆191Updated 3 years ago
• securebinary / firebaseExploiter
  FirebaseExploiter is a vulnerability discovery tool that discovers Firebase Database which are open and can be exploitable. Primarily bui…
  ☆170Updated 3 years ago
• wdahlenburg / interactsh-collaborator
  Burpsuite plugin for Interact.sh
  ☆228Updated last year
• Proviesec / directory-files-payload-lists
  Directory scans
  ☆84Updated last year
• BishopFox / Imperva_gzip_WAF_Bypass
  ☆159Updated 3 years ago
• EasyRecon / Hunt3r
  Made your bugbounty subdomains reconnaissance easier with Hunt3r the web application reconnaissance framework
  ☆170Updated 2 years ago
• cve-sandbox / jquery-ui
  CVE Collection of jQuery UI XSS Payloads
  ☆119Updated 2 years ago
• NotSoSecure / NotSoCereal-Lab
  NotSoCereal: A Deserialization exploit playground
  ☆54Updated 3 years ago
• PortSwigger / js-miner
  This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.
  ☆79Updated 2 years ago
• Static-Flow / BurpSuiteAutoCompletion
  This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.
  ☆164Updated 4 years ago
• Moopinger / smugglefuzz
  A rapid HTTP downgrade smuggling scanner written in Go.
  ☆312Updated last year
• kh4sh3i / Apache-Tomcat-Pentesting
  Apache Tomcat exploit and Pentesting guide for penetration tester
  ☆63Updated 3 years ago
• emadshanab / Nmap-NSE-scripts-collection
  ☆171Updated 2 months ago
• d3mondev / burp-vps-proxy
  This Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.
  ☆245Updated 9 months ago
• osmedeus / osmedeus-workflow
  Community Workflow for the Osmedeus Engine that describes basic reconnaissance methodology for you to build your own
  ☆75Updated last year
• trickest / log4j
  Trickest Workflow for discovering log4j vulnerabilities and gathering the newest community payloads.
  ☆112Updated 3 years ago
• pentesterland / Log4Shell
  ☆73Updated 3 years ago
• j3ssie / sdlookup
  IP Lookups for Open Ports and Vulnerabilities from internetdb.shodan.io
  ☆131Updated 3 years ago
• bm402 / apidor
  A tool that automates the search for IDOR vulnerabilities in web apps and APIs
  ☆61Updated 4 years ago
• KathanP19 / protoscan
  Prototype Pollution Scanner
  ☆129Updated 4 years ago
• ethicalhackingplayground / TProxer
  A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.
  ☆184Updated 4 years ago
• zapstiko / wordlists
  All Type of Payloads
  ☆137Updated last year
• DevSecOpsDocs / nuclearpond
  Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.
  ☆186Updated last year
• hussein98d / LFI-files
  Wordlist to bruteforce for LFI
  ☆128Updated 6 years ago
• pentagridsec / PentagridScanController
  Improve automated and semi-automated active scanning in Burp Pro
  ☆62Updated 6 months ago