Alternatives and similar repositories for skf-labs

Users that are interested in skf-labs are comparing it to the libraries listed below

• koenbuyens / Vulnerable-OAuth-2.0-Applications
  vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.
  ☆316Updated last year
• snoopysecurity / dvws-node
  Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API re…
  ☆480Updated 9 months ago
• imperva / automatic-api-attack-tool
  Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an outp…
  ☆477Updated 2 years ago
• timip / OSWE
  OSWE Preparation
  ☆627Updated 2 years ago
• PortSwigger / upload-scanner
  HTTP file upload scanner for Burp Proxy
  ☆409Updated 2 years ago
• 0xdekster / ReconNote
  Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security prof…
  ☆415Updated 4 years ago
• M507 / AWAE-Preparation
  This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.
  ☆242Updated 5 years ago
• incredibleindishell / SSRF_Vulnerable_Lab
  This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack
  ☆730Updated last year
• jbarone / xxelab
  A simple web app with a XXE vulnerability.
  ☆228Updated 3 years ago
• softwaresecured / secure-code-review-checklist
  A starter secure code review checklist
  ☆182Updated 6 years ago
• Charlie-belmer / nosqli
  NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.
  ☆383Updated 3 years ago
• random-robbie / keywords
  ☆363Updated 3 years ago
• DiogoMRSilva / websitesVulnerableToSSTI
  Simple websites vulnerable to Server Side Template Injections(SSTI)
  ☆395Updated 2 years ago
• wisec / domxsswiki
  Automatically exported from code.google.com/p/domxsswiki
  ☆537Updated 7 years ago
• epi052 / recon-pipeline
  An automated target reconnaissance pipeline.
  ☆435Updated 2 years ago
• PortSwigger / xss-cheatsheet-data
  This repository contains all the XSS cheatsheet data to allow contributions from the community.
  ☆427Updated this week
• deletehead / awae_oswe_prep
  Stuff done in preparation for AWAE course and OSWE certification
  ☆152Updated 4 years ago
• geeksonsecurity / vuln-web-apps
  A curated list of vulnerable web applications.
  ☆305Updated last year
• daeken / SSRFTest
  SSRF testing tool
  ☆244Updated 2 years ago
• wetw0rk / AWAE-PREP
  This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with t…
  ☆896Updated 6 months ago
• ngalongc / openapi_security_scanner
  ☆173Updated 4 years ago
• PortSwigger / autowasp
  BurpSuite Extension: A one-stop pen testing checklist and logger tool
  ☆266Updated 2 years ago
• msrkp / PPScan
  Client Side Prototype Pollution Scanner
  ☆518Updated 2 years ago
• mazen160 / jwt-pwn
  Security Testing Scripts for JWT
  ☆316Updated 3 years ago
• assetnote / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆881Updated 3 years ago
• GoSecure / dtd-finder
  List DTDs and generate XXE payloads using those local DTDs.
  ☆633Updated last year
• ArturSS7 / TukTuk
  Tool for catching and logging different types of requests.
  ☆220Updated 4 years ago
• honoki / bbrf-client
  The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices
  ☆627Updated last week
• assetnote / commonspeak2
  Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists
  ☆737Updated 2 years ago
• capt-meelo / LazyRecon
  An automated approach to performing recon for bug bounty hunting and penetration testing.
  ☆446Updated 4 years ago