Alternatives and similar repositories for CrossCheck

Users that are interested in CrossCheck are comparing it to the libraries listed below

• doyensec / oidc-ssrf
  An Evil OIDC Server
  ☆54Updated 3 years ago
• synacktiv / gh-hijack-runner
  A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.
  ☆27Updated last year
• synacktiv / DepFuzzer
  ☆94Updated last month
• nccgroup / cq
  ☆116Updated 2 years ago
• JeffJerseyCow / eviloauth
  OAuth 2.0 exploitation, attack and research tools.
  ☆12Updated 2 years ago
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆137Updated last week
• MegaManSec / Squid-Security-Audit
  A detailed repository of vulnerabilities that I discovered in The Squid Caching Proxy.
  ☆23Updated last year
• nodyhub / zipslipper
  Create tar/zip archives that try to exploit zipslip vulnerability.
  ☆48Updated last year
• nccgroup / ccs
  ☆114Updated 2 years ago
• markkcc / crxaminer
  Examine Chrome extensions for security issues
  ☆93Updated 2 months ago
• federicodotta / semgrep-rules
  A collection of my Semgrep rules
  ☆51Updated 2 years ago
• phretor / infosec-opml
  My very personal and opinionatedly organized infosec/cybersec sources in one OPML file
  ☆59Updated 3 years ago
• RefactorSecurity / vscode-security-notes
  Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝
  ☆141Updated 3 months ago
• DataDog / HASH
  HASH (HTTP Agnostic Software Honeypot)
  ☆141Updated last year
• nccgroup / cowcloud
  ☆60Updated 2 years ago
• pentagridsec / archive_pwn
  A Python-based tool to create zip, tar and cpio archives to exploit common archive library issues and developer mistakes
  ☆43Updated 2 months ago
• s0rcy / semgrep-rules
  Collection of Semgrep rules for security analysis
  ☆10Updated last year
• prjblk / aura-dump
  Dumps Salesforce objects if provided with credentials.
  ☆25Updated 6 months ago
• The-Login / DNS-Analysis-Server
  Tools to assess DNS security.
  ☆153Updated last year
• praetorian-inc / noseyparker-explorer
  Interactive results explorer and annotation tool for Nosey Parker
  ☆47Updated 7 months ago
• siamthanathack / Passkey-Raider
  Burp Suite extension for testing Passkey systems.
  ☆75Updated 10 months ago
• adelapazborrero / slack_jack
  Hijack a slack bot to phish your way in
  ☆57Updated 6 months ago
• stephenbradshaw / aws_url_signer
  POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF
  ☆59Updated 2 years ago
• semgrep / semgrep-docs
  Documentation of Semgrep: a fast, open-source, static analysis tool.
  ☆48Updated last week
• hac01 / gcp-iam-brute
  ☆51Updated last year
• IBM / tls-vuln-cheatsheet
  A quick reference for understanding the nature and severity of vulnerabilities in TLS configurations and implementations.
  ☆29Updated 5 years ago
• carlospolop / Bruteforce-GCP-Permissions
  Use the GCP testIamPermissions functionality to bruteforce and discover your permissions
  ☆45Updated 7 months ago
• Orange-OpenSource / decret
  DEbian Cve REproducer Tool
  ☆27Updated 3 weeks ago
• SonarSource / argument-injection-vectors
  A curated list of argument injection vectors
  ☆41Updated last year
• morganc3 / KOAuth
  OAuth 2.0 Dynamic Security Scanner
  ☆33Updated 4 years ago