Alternatives and similar repositories for challenge-toolbox

Users that are interested in challenge-toolbox are comparing it to the libraries listed below

• sethlaw / sputr
  Security Payload Unit Test Repository (SPUTR)
  ☆86Updated 2 years ago
• floyd-fuh / crass
  Code Review Audit Script Scanner
  ☆141Updated last week
• torque59 / AWS-Vulnerable-Lambda
  An AWS Lambda vulnerable application written in flask.
  ☆49Updated 8 years ago
• VirtueSecurity / aws-extender-cli
  AWS Extender CLI is a command-line script to test S3 buckets as well as Google Storage buckets and Azure Storage containers for common mi…
  ☆83Updated 5 years ago
• radicallyopensecurity / pentesting-scripts
  Scripts that we use for pentesting
  ☆42Updated 8 years ago
• nccgroup / Berserko
  Burp Suite extension to perform Kerberos authentication
  ☆105Updated last year
• joswr1ght / MobileAppReportCard
  Microsoft Excel spreadsheets for consistent security evaluation of Android and iOS mobile applications
  ☆50Updated 10 years ago
• pentestgeek / burpcommander
  Ruby command-line interface to Burp Suite's REST API
  ☆58Updated 5 years ago
• singe / container-breakouts
  Testing/collecting some container breakouts
  ☆94Updated 6 years ago
• spaceB0x / cider
  Continuous Integration and Development ExploiteR
  ☆87Updated 2 years ago
• PinkP4nther / aws-testing-notes
  Notes as I learn basic AWS penetration testing
  ☆67Updated 6 years ago
• RUB-NDS / BurpSSOExtension
  An extension for BurpSuite that highlights SSO messages in Burp's proxy window..
  ☆118Updated 4 years ago
• DenizParlak / hayat
  Hayat is a script for report and analyze Google Cloud Platform resources.
  ☆81Updated 5 years ago
• eoftedal / deserialize
  intentionally vulnerable API
  ☆30Updated last year
• PentesterLab / sectalks
  ☆12Updated 8 years ago
• netspooky / gtfoplus
  Linux Local Privesc Helper and Agent
  ☆166Updated 5 years ago
• leesoh / iheartreporting
  Reporting Tips for Penetration Testers
  ☆31Updated 4 years ago
• 0xbharath / slurp-old
  A tool to enumerate S3 buckets manually or via certstream
  ☆82Updated 2 years ago
• aurainfosec / burp-multi-browser-highlighting
  Highlight Burp proxy requests made by different browsers
  ☆29Updated 8 years ago
• foi-oss / ortbot
  Open Red Team Bag of Tricks - Red Teaming and Pentesting cheat sheet and trick book
  ☆97Updated 8 years ago
• dxa4481 / AttackingAndDefendingTheGCPMetadataAPI
  This repo gives an overview of some GCP metadata API attack and defend patterns
  ☆77Updated 5 years ago
• secdec / attack-surface-detector-zap
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆64Updated 2 years ago
• ReconJSON / ReconJSON
  ReconJSON is a project dedicated to creating a flexible and consistent JSON format across popular recon tools.
  ☆102Updated 6 years ago
• FishermansEnemy / bucket_finder
  Amazon bucket brute force tool
  ☆102Updated 12 years ago
• TestingPens / Constole
  Scan for and exploit Consul agents
  ☆40Updated 6 years ago
• snyff / oauthsecurity
  OAuth Security Cheatsheet
  ☆40Updated 11 years ago
• SmeegeSec / GitHub-Wiki-Auditor
  Python script to check GitHub accounts for world-editable wiki pages
  ☆21Updated 2 years ago
• ThisIsLibra / genesis
  A framework to generate unique test cases based on code snippets to test techniques
  ☆54Updated 4 years ago
• int0x80 / tcispy
  Pull author and committer names and emails from Travis-CI
  ☆11Updated 5 years ago
• devsecops / defcon-workshop
  ☆67Updated 8 years ago