Alternatives and similar repositories for app-sec-wiki

Users that are interested in app-sec-wiki are comparing it to the libraries listed below

• nightowl131 / AAPG
  [A]ndroid [A]pplication [P]entest [G]uide
  ☆124Updated 6 years ago
• amolnaik4 / bodhi
  Bodhi - Client-side Vulnerability Playground
  ☆121Updated 4 years ago
• EdOverflow / proof-of-concepts
  A little collection of fun and creative proof of concepts to demonstrate the potential impact of a security vulnerability.
  ☆165Updated 6 years ago
• secdec / attack-surface-detector-burp
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆106Updated last year
• gwen001 / actarus
  Actarus is a custom tool for bug bounty
  ☆77Updated 6 years ago
• appsecco / practical-recon-levelup0x02
  This repository contains all the material from the talk "Practical recon techniques for bug hunters & pentesters" given at Bugcrowd Level…
  ☆61Updated 6 years ago
• ajinabraham / WebAppSec
  Web Application Security
  ☆129Updated last year
• OWASP-Ruhrpott / owasp-workshop-android-pentest
  Learning Penetration Testing of Android Applications
  ☆80Updated 8 years ago
• davevs / dvxte
  Damn Vulnerable eXtensive Training Environment
  ☆108Updated 3 years ago
• mystech7 / Burp-Hunter
  XSS Hunter Burp Plugin
  ☆150Updated 7 years ago
• dogangcr / vulnerable-sso
  vulnerable single sign on
  ☆149Updated last year
• foospidy / web-cve-tests
  A simple framework for sending test payloads for known web CVEs.
  ☆133Updated 4 years ago
• securityidiots / CollabOzark
  CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE, External Resource Access payloads triggers.
  ☆135Updated 6 years ago
• sawzeeyy / Sanitiz3r
  A python script that filters, checks the validity, generates clickable link(s) of subdomain(s), and reports their status
  ☆89Updated 5 years ago
• Hacker0x01 / h1-212-ctf-solutions
  A collection of the solutions people wrote for the H1-212 Capture The Flag event
  ☆97Updated 6 years ago
• secvulture / dvta
  Damn Vulnerable Thick Client App
  ☆151Updated 5 years ago
• dreadlocked / SSRFmap
  Simple Server Side Request Forgery services enumeration tool.
  ☆55Updated 7 years ago
• appsecco / VyAPI
  VyAPI - A cloud based vulnerable hybrid Android App
  ☆86Updated 5 years ago
• PortSwigger / command-injection-attacker
  SHELLING - a comprehensive OS command injection payload generator
  ☆110Updated 6 years ago
• upgoingstar / hackerone_public_reports
  Finds all public bug reports on reported on Hackerone
  ☆95Updated 9 years ago
• maK- / scanomaly-2years
  This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping
  ☆48Updated 6 years ago
• koto / gitpillage
  Pillage a git repo found in an accessible web root
  ☆61Updated 14 years ago
• bonkc / BugBountySubdomains
  Tools to gather subdomains from Bug Bounty programs
  ☆65Updated 7 years ago
• n3k / Pentest
  Notes/Tools for pentesting
  ☆79Updated last year
• br3akp0int / GQLParser
  A repository for GraphQL Extension for Burp Suite
  ☆57Updated 7 years ago
• pentestgeek / burpcommander
  Ruby command-line interface to Burp Suite's REST API
  ☆58Updated 5 years ago
• EdOverflow / smith
  Simple wrapper for meg that sieves through meg's output for you.
  ☆60Updated 6 years ago
• PinkP4nther / aws-testing-notes
  Notes as I learn basic AWS penetration testing
  ☆67Updated 6 years ago
• ollseg / ttt-ext
  Chrome extension to aid in finding DOMXSS by simple taint analysis of string values.
  ☆80Updated 6 years ago
• EdOverflow / h1-cli
  A CLI tool to interact with hackerone.com. This was my submission for HackerOne's Summer 2018 Hack Day.
  ☆40Updated 7 years ago