chennylmf / OWASP-Web-App-Pentesting-checklistsLinks
☆71Updated 4 years ago
Alternatives and similar repositories for OWASP-Web-App-Pentesting-checklists
Users that are interested in OWASP-Web-App-Pentesting-checklists are comparing it to the libraries listed below
Sorting:
- ☆76Updated 4 years ago
- Sometimes we want to fuzz a set of sub-domain URLs with a common wordlist. Fuzzing them one by one is a tedious task, not to mention the …☆51Updated 4 years ago
- Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.☆92Updated last week
- Misc bounty and vulndisc things☆85Updated 4 years ago
- Suite of programs meant to aid in bug hunting and security assessments☆77Updated 5 years ago
- AWS S3 open bucket poc automated script.☆57Updated 3 years ago
- ☆108Updated 4 years ago
- 📚 An ultimate collection wordlists of the best-known CMS☆91Updated last year
- Weaponizing Live CT logs for automated monitoring of assets☆134Updated 3 years ago
- A combined wordlists for files and directory discovery☆125Updated 4 years ago
- This Repo contains wordlist for subdomain enumeration , php file path, html file path, and js file path☆103Updated 4 years ago
- A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…☆132Updated 4 years ago
- ☆61Updated 11 months ago
- XSS Payload without Anything.☆105Updated 6 years ago
- A collection of code for interacting with API sources directly to improve your understanding of those services.☆65Updated 4 years ago
- Hacked together script for feeding urls into Burp's Sitemap☆93Updated 2 months ago
- part of my wordlist to bruteforce DNS to find subdoamains.☆61Updated 3 years ago
- A simple Bash one liner with aim to automate CRLF vulnerability scanning.☆69Updated 4 years ago
- ☆60Updated last year
- Bucky (An automatic S3 bucket discovery tool)☆197Updated 3 years ago
- Horizontal Domain Discovery☆76Updated 2 years ago
- Clientside vulnerability / reflected xss fuzzer☆150Updated last year
- Cross Origin Resource Sharing MisConfiguration Scanner☆173Updated 3 years ago
- s3 brute force tool☆44Updated 4 years ago
- ☆17Updated 4 years ago
- SQLi Query Tampering extends and adds custom Payload Generator/Processor in Burp Suite's Intruder. This extension gives you the flexibil…☆155Updated 4 years ago
- Reestructured LemonBooster.☆47Updated 11 months ago
- A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bul…☆99Updated 4 years ago
- ☆10Updated 5 years ago
- Custom scripts for the PIPER Burp extensions.☆98Updated last year