Alternatives and similar repositories for flask-webgoat:

Users that are interested in flask-webgoat are comparing it to the libraries listed below

• PortSwigger / auth-matrix
  AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
  ☆39Updated last year
• LewisArdern / metasecjs
  MetaSec.js combines all the free open-source security tools to identify issues with JavaScript and automates the boring parts
  ☆79Updated last year
• CaptainFreak / Web-CTF-Challenges
  Collection of quirky behaviours of code and the CTF challenges that I made around them.
  ☆27Updated 3 years ago
• janmasarik / bugshop
  ☆44Updated 4 years ago
• BlackFan / cspp-tools
  Client-Side Prototype Pollution Tools
  ☆84Updated 3 years ago
• lc / jenkinz
  jenkinz is a tool to retrieve every build for every job ever created and run on a given Jenkins instance.
  ☆66Updated 5 years ago
• Universe1122 / smuggler.py
  HTTP request smuggling tools
  ☆18Updated 4 years ago
• fransr / hot-jar-swapping-urlclassloader
  Demo of the URLClassLoader JAR-swapping showing the ability to replace and exploit an already loaded JAR with inner classes
  ☆31Updated 2 years ago
• federicodotta / semgrep-rules
  A collection of my Semgrep rules
  ☆48Updated last year
• gand3lf / semgrepper
  An extension to use Semgrep inside Burp Suite.
  ☆88Updated last year
• opnsec / postMessage-logger
  Simple "postMessage logger" Chrome extension
  ☆94Updated 4 years ago
• iosifache / semgrep-rules-manager
  Manager of third-party sources of Semgrep rules 🗂
  ☆77Updated 5 months ago
• PortSwigger / nginx-alias-traversal
  Burp extension to detect alias traversal via NGINX misconfiguration at scale.
  ☆52Updated 3 years ago
• Rhynorater / reports
  ☆59Updated 6 months ago
• jorritfolmer / vulnerable-api
  Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops
  ☆42Updated 11 months ago
• justmorpheus / burp-automation
  Performing automated scan using Burp Suite Pro & Vmware Burp Rest API
  ☆49Updated 2 years ago
• pingidentity / AuraIntruder
  ☆17Updated last year
• war-and-code / akamai-arl-hack
  Script to test open Akamai ARL vulnerability.
  ☆70Updated 3 years ago
• kapytein / jsonp
  jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints.
  ☆149Updated 3 years ago
• PortSwigger / scan-check-builder
  Burp Bounty is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.
  ☆70Updated 2 years ago
• akto-api-security / tests-library
  Community generated list of API security tests to find OWASP top10, HackerOne top 10 vulnerabilities
  ☆35Updated this week
• righettod / burp-piper-custom-scripts
  Custom scripts for the PIPER Burp extensions.
  ☆97Updated last year
• BlackFan / CVE_PoCs
  CVE PoCs
  ☆21Updated 4 years ago
• smiegles / extract-relative-url-heapsnapshot
  Extract relative urls from a heap snapshot
  ☆85Updated 3 years ago
• Cache-Money / chronorace
  ☆70Updated 3 years ago
• rinku191 / OSWE-prepration
  Important notes for oswe exam prepration. Challenges faces during oswe exam prepration.
  ☆17Updated 5 years ago
• ndavison / circleci-logs
  CircleCI log and security configuration automations
  ☆22Updated 4 years ago
• parsiya / eslinter
  Manual JavaScript Linting is a Bug
  ☆49Updated 3 years ago
• defparam / haptyc
  ☆93Updated 3 years ago
• detectify / Varnish-H2-Request-Smuggling
  ☆56Updated 3 years ago