Alternatives and similar repositories for app-sec-wiki

Users that are interested in app-sec-wiki are comparing it to the libraries listed below

• amolnaik4 / bodhi
  Bodhi - Client-side Vulnerability Playground
  ☆122Updated 4 years ago
• nightowl131 / AAPG
  [A]ndroid [A]pplication [P]entest [G]uide
  ☆122Updated 6 years ago
• EdOverflow / proof-of-concepts
  A little collection of fun and creative proof of concepts to demonstrate the potential impact of a security vulnerability.
  ☆165Updated 6 years ago
• ajinabraham / WebAppSec
  Web Application Security
  ☆129Updated 3 weeks ago
• mystech7 / Burp-Hunter
  XSS Hunter Burp Plugin
  ☆150Updated 7 years ago
• appsecco / practical-recon-levelup0x02
  This repository contains all the material from the talk "Practical recon techniques for bug hunters & pentesters" given at Bugcrowd Level…
  ☆61Updated 6 years ago
• gwen001 / actarus
  Actarus is a custom tool for bug bounty
  ☆77Updated 6 years ago
• PortSwigger / command-injection-attacker
  SHELLING - a comprehensive OS command injection payload generator
  ☆110Updated 6 years ago
• sawzeeyy / Sanitiz3r
  A python script that filters, checks the validity, generates clickable link(s) of subdomain(s), and reports their status
  ☆89Updated 5 years ago
• davevs / dvxte
  Damn Vulnerable eXtensive Training Environment
  ☆108Updated 3 years ago
• dreadlocked / SSRFmap
  Simple Server Side Request Forgery services enumeration tool.
  ☆55Updated 7 years ago
• dogangcr / vulnerable-sso
  vulnerable single sign on
  ☆148Updated last year
• secvulture / dvta
  Damn Vulnerable Thick Client App
  ☆154Updated 5 years ago
• n3k / Pentest
  Notes/Tools for pentesting
  ☆79Updated 2 years ago
• secdec / attack-surface-detector-burp
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆110Updated 2 years ago
• securityidiots / CollabOzark
  CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE, External Resource Access payloads triggers.
  ☆135Updated 6 years ago
• GrrrDog / ZeroNights-WebVillage-2017
  ☆71Updated 8 years ago
• Hacker0x01 / h1-212-ctf-solutions
  A collection of the solutions people wrote for the H1-212 Capture The Flag event
  ☆97Updated 6 years ago
• 7ioSecurity / XSS-Payloads
  XSS Payloads
  ☆49Updated 9 years ago
• pentestgeek / burpcommander
  Ruby command-line interface to Burp Suite's REST API
  ☆58Updated 5 years ago
• appsecco / VyAPI
  VyAPI - A cloud based vulnerable hybrid Android App
  ☆86Updated 5 years ago
• koto / gitpillage
  Pillage a git repo found in an accessible web root
  ☆61Updated 14 years ago
• SpiderLabs / Airachnid-Burp-Extension
  A Burp Extension to test applications for vulnerability to the Web Cache Deception attack
  ☆139Updated 4 years ago
• PortSwigger / scan-check-builder
  Burp Bounty is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.
  ☆71Updated 3 years ago
• OWASP-Ruhrpott / owasp-workshop-android-pentest
  Learning Penetration Testing of Android Applications
  ☆80Updated 8 years ago
• 0ang3el / EasyCSRF
  ☆162Updated 8 years ago
• foospidy / web-cve-tests
  A simple framework for sending test payloads for known web CVEs.
  ☆133Updated 5 years ago
• PortSwigger / distribute-damage
  Evenly distributes scanner load across targets
  ☆92Updated 8 months ago
• upgoingstar / hackerone_public_reports
  Finds all public bug reports on reported on Hackerone
  ☆95Updated 10 years ago
• dsopas / h1-search
  Tool that will request the public disclosures on a specific HackerOne program and show them in a localhost webserver.
  ☆63Updated 6 years ago