Alternatives and similar repositories for awesome-product-security

Users that are interested in awesome-product-security are comparing it to the libraries listed below

• stafordtituss / HazProne
  HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand AWS resources enab…
  ☆40Updated 3 years ago
• PalindromeLabs / WebSockets-Playground
  Jumpstart multiple WebSocket servers quickly
  ☆32Updated 3 years ago
• JOSHUAJEBARAJ / GCP-GOAT
  GCP GOAT is the vulnerable application for learn the GCP Security
  ☆68Updated 6 months ago
• doyensec / cloudsec-tidbits
  Blogpost series showcasing interesting cloud - web app security bugs
  ☆50Updated 2 years ago
• kerberosmansour / InfoSecOpenAIExamples
  InfoSec OpenAI Examples
  ☆19Updated last year
• ayushpriya10 / IMDShift
  ☆55Updated 2 years ago
• ne0z / DamnVulnerableMicroServices
  This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development)
  ☆45Updated 2 years ago
• yeswehack / myopenvdp
  MyOpenVDP is a free web application to install a vulnerability disclosure policy or a vulnerability disclosure program on your assets. (V…
  ☆31Updated last year
• trickest / elasticsearch_index
  Manage attack surface data on Elasticsearch
  ☆23Updated last year
• corneacristian / Do-It-Yourself-Web-Penetration-Testing
  Do It Yourself! (DIY) Web Penetration Testing is a guideline in performing security test cases against web applications
  ☆39Updated 2 years ago
• Outpost24 / outpost24-cors-check
  Additional active scan checks for BURP
  ☆28Updated last year
• zer1t0 / awsenum
  Enumerate AWS permissions and resources.
  ☆70Updated 3 years ago
• jjogal / shodan-dorks
  ☆25Updated 5 months ago
• intrudir / burpcollaborator-docker
  A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…
  ☆30Updated 10 months ago
• yousseflahouifi / moniorg
  moniorg is a tool that leverages crt.sh website to monitor domains of a target
  ☆47Updated 2 years ago
• nullenc0de / ChromeAudit
  Nuclei plugins to audit Chrome extensions
  ☆65Updated last year
• goyalvartul / Cloud-Security-Encyclopedia
  ☆11Updated 2 years ago
• OWASP / wrongsecrets-ctf-party
  Run Capture the Flags and Security Trainings with OWASP WrongSecrets
  ☆52Updated this week
• SirAppSec / bsides-shadow-api
  This repository hosts several snippets and file related to the BsidesLV 2024 talk about Shadow and Zombie APIs by me
  ☆18Updated last year
• 0xb1tByte / eWPTXv2-Journey
  This repository is intended for sharing files/tools/tutorials..etc that related to eWPTXv2 from eLearnSecurity
  ☆14Updated 5 years ago
• pageinsec / portswigger_academy
  Scripts and misc. stuff related to the PortSwigger Web Academy
  ☆17Updated 3 years ago
• nightwatchcybersecurity / gitbleed_tools
  ☆90Updated 3 years ago
• infosecak / DVBE
  Damn Vulnerable Browser Extension (DVBE), previously named as Badly Coded Browser Extension (BCBE), is an open-source vulnerable Chrome E…
  ☆31Updated 8 months ago
• trickest / scripts
  Handy scripts and one-liners to make life easier
  ☆37Updated 2 years ago
• hac01 / gcp-iam-brute
  ☆50Updated last year
• lacioffi / GCP-pentest-lab
  A vulnerable environment for exploring common GCP misconfigurations and vulnerabilities
  ☆29Updated last week
• antitree / vault-backdoored
  A tool for secrets management, encryption as a service, and privileged access management
  ☆14Updated 4 months ago
• CyberSecurityUP / OSWE
  ☆18Updated 4 years ago
• Th3l0newolf / Desktop-WorkStation-Endpoint-Security-CheckList
  ☆13Updated 3 years ago
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆42Updated last year