Alternatives and similar repositories for pentest-mapper

Users that are interested in pentest-mapper are comparing it to the libraries listed below

• 0xmoot / s3sec
  Check AWS S3 instances for read/write/delete access
  ☆121Updated 3 years ago
• dbrwsky / Nuclei-BurpExtension
  Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.
  ☆119Updated 2 years ago
• securebinary / firebaseExploiter
  FirebaseExploiter is a vulnerability discovery tool that discovers Firebase Database which are open and can be exploitable. Primarily bui…
  ☆167Updated 3 years ago
• osmedeus / osmedeus-base
  Build your own reconnaissance system with Osmedeus Next Generation
  ☆200Updated 3 months ago
• Anof-cyber / Pentest-Mapper
  A Burp Suite Extension for pentester and bug bounty hunters an to maintain checklist, map flows, write test cases and track vulnerabiliti…
  ☆118Updated 2 years ago
• PortSwigger / auth-analyzer
  ☆108Updated last year
• BishopFox / Imperva_gzip_WAF_Bypass
  ☆158Updated 3 years ago
• wdahlenburg / interactsh-collaborator
  Burpsuite plugin for Interact.sh
  ☆228Updated last year
• Proviesec / directory-files-payload-lists
  Directory scans
  ☆84Updated last year
• emadshanab / Nmap-NSE-scripts-collection
  ☆171Updated 3 weeks ago
• cve-sandbox / jquery-ui
  CVE Collection of jQuery UI XSS Payloads
  ☆118Updated 2 years ago
• iamthefrogy / nerdbug
  Full Nuclei automation script with logic explanation.
  ☆245Updated 3 years ago
• pry0cc / proteus
  A projectdiscovery driven attack surface monitoring bot powered by axiom
  ☆191Updated 3 years ago
• PortSwigger / js-miner
  This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.
  ☆77Updated 2 years ago
• EasyRecon / Hunt3r
  Made your bugbounty subdomains reconnaissance easier with Hunt3r the web application reconnaissance framework
  ☆170Updated 2 years ago
• NotSoSecure / NotSoCereal-Lab
  NotSoCereal: A Deserialization exploit playground
  ☆54Updated 3 years ago
• zapstiko / wordlists
  All Type of Payloads
  ☆134Updated last year
• hahwul / RegexPassive
  🔭 Collection of regexp pattern for security passive scanning
  ☆117Updated 2 years ago
• trickest / trickest-cli
  Execute Trickest workflows right from your terminal
  ☆94Updated 3 weeks ago
• Static-Flow / BurpSuiteAutoCompletion
  This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.
  ☆164Updated 4 years ago
• trickest / mkpath
  Make URL path combinations using a wordlist
  ☆170Updated 2 years ago
• osmedeus / osmedeus-workflow
  Community Workflow for the Osmedeus Engine that describes basic reconnaissance methodology for you to build your own
  ☆75Updated last year
• raverrr / plution
  Prototype pollution scanner using headless chrome
  ☆219Updated 3 years ago
• ahmad0x1 / ARWAD
  Advanced Reconnaissance and Web Application Discovery
  ☆88Updated 3 years ago
• moeinfatehi / Admin-Panel_Finder
  A burp suite extension that enumerates infrastructure and application admin interfaces (OTG-CONFIG-005)
  ☆122Updated 3 years ago
• KathanP19 / protoscan
  Prototype Pollution Scanner
  ☆126Updated 4 years ago
• ethicalhackingplayground / TProxer
  A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.
  ☆183Updated 3 years ago
• seanmarpo / webjars-swagger-xss
  PoC for XSS in org.webjars:swagger-ui [3.14.2, 3.36.2]
  ☆53Updated 2 years ago
• h33tlit / Nuclei-and-Subfinder-API
  Web API for nuclei and subfinder will help you automate your entire security testing workflow since you can host it anywhere and make it …
  ☆61Updated 3 years ago
• DevSecOpsDocs / nuclearpond
  Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.
  ☆185Updated last year