Alternatives and similar repositories for app-sec-wiki

Users that are interested in app-sec-wiki are comparing it to the libraries listed below

• amolnaik4 / bodhi
  Bodhi - Client-side Vulnerability Playground
  ☆121Updated 4 years ago
• nightowl131 / AAPG
  [A]ndroid [A]pplication [P]entest [G]uide
  ☆124Updated 6 years ago
• davevs / dvxte
  Damn Vulnerable eXtensive Training Environment
  ☆106Updated 3 years ago
• secdec / attack-surface-detector-burp
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆106Updated last year
• EdOverflow / proof-of-concepts
  A little collection of fun and creative proof of concepts to demonstrate the potential impact of a security vulnerability.
  ☆165Updated 5 years ago
• gwen001 / actarus
  Actarus is a custom tool for bug bounty
  ☆77Updated 5 years ago
• OWASP-Ruhrpott / owasp-workshop-android-pentest
  Learning Penetration Testing of Android Applications
  ☆79Updated 8 years ago
• ajinabraham / WebAppSec
  Web Application Security
  ☆129Updated last year
• mystech7 / Burp-Hunter
  XSS Hunter Burp Plugin
  ☆150Updated 7 years ago
• dogangcr / vulnerable-sso
  vulnerable single sign on
  ☆148Updated last year
• Hacker0x01 / h1-212-ctf-solutions
  A collection of the solutions people wrote for the H1-212 Capture The Flag event
  ☆96Updated 6 years ago
• foospidy / web-cve-tests
  A simple framework for sending test payloads for known web CVEs.
  ☆133Updated 4 years ago
• br3akp0int / GQLParser
  A repository for GraphQL Extension for Burp Suite
  ☆57Updated 6 years ago
• sawzeeyy / Sanitiz3r
  A python script that filters, checks the validity, generates clickable link(s) of subdomain(s), and reports their status
  ☆89Updated 4 years ago
• secvulture / dvta
  Damn Vulnerable Thick Client App
  ☆151Updated 5 years ago
• appsecco / practical-recon-levelup0x02
  This repository contains all the material from the talk "Practical recon techniques for bug hunters & pentesters" given at Bugcrowd Level…
  ☆61Updated 6 years ago
• upgoingstar / hackerone_public_reports
  Finds all public bug reports on reported on Hackerone
  ☆93Updated 9 years ago
• dsopas / h1-search
  Tool that will request the public disclosures on a specific HackerOne program and show them in a localhost webserver.
  ☆64Updated 6 years ago
• netbiosX / Pentest-Bookmarks
  Database of websites for penetration testing
  ☆177Updated 5 years ago
• EdOverflow / smith
  Simple wrapper for meg that sieves through meg's output for you.
  ☆60Updated 6 years ago
• appsecco / VyAPI
  VyAPI - A cloud based vulnerable hybrid Android App
  ☆86Updated 5 years ago
• maK- / scanomaly-2years
  This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping
  ☆48Updated 5 years ago
• dreadlocked / SSRFmap
  Simple Server Side Request Forgery services enumeration tool.
  ☆55Updated 7 years ago
• pentestgeek / burpcommander
  Ruby command-line interface to Burp Suite's REST API
  ☆58Updated 5 years ago
• logicalhacking / DVHMA
  Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities.
  ☆269Updated 7 years ago
• bonkc / BugBountySubdomains
  Tools to gather subdomains from Bug Bounty programs
  ☆65Updated 7 years ago
• koto / gitpillage
  Pillage a git repo found in an accessible web root
  ☆61Updated 14 years ago
• a0xnirudh / kurukshetra
  Kurukshetra - A framework for teaching secure coding by means of interactive problem solving.
  ☆140Updated last year
• n3k / Pentest
  Notes/Tools for pentesting
  ☆79Updated last year
• ollseg / ttt-ext
  Chrome extension to aid in finding DOMXSS by simple taint analysis of string values.
  ☆80Updated 6 years ago