Alternatives and similar repositories for hijagger:

Users that are interested in hijagger are comparing it to the libraries listed below

• controlplaneio / truffleproc
  truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)
  ☆113Updated last year
• praetorian-inc / gato
  GitHub Actions Pipeline Enumeration and Attack Tool
  ☆583Updated this week
• nikitastupin / pwnhub
  How GitHub Actions workflows can be hacked
  ☆119Updated 5 months ago
• trufflesecurity / driftwood
  Private key usage verification
  ☆423Updated 2 months ago
• mschwager / route-detect
  Find authentication (authn) and authorization (authz) security bugs in web application routes.
  ☆256Updated 7 months ago
• PortSwigger / oauth-scan
  Burp Suite Extension useful to verify OAUTHv2 and OpenID security
  ☆186Updated 2 months ago
• boringtools / git-alerts
  Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
  ☆216Updated last month
• RefactorSecurity / vscode-security-notes
  Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝
  ☆132Updated last year
• assetnote / ghostbuster
  Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.
  ☆268Updated 4 months ago
• synacktiv / nord-stream
  Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …
  ☆268Updated last week
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆112Updated this week
• AdnaneKhan / Gato-X
  GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.
  ☆238Updated last week
• DataDog / security-labs-pocs
  Proof of concept code for Datadog Security Labs referenced exploits.
  ☆421Updated last year
• nccgroup / ccs
  ☆109Updated last year
• The-Login / DNS-Analysis-Server
  Tools to assess DNS security.
  ☆151Updated 11 months ago
• trufflesecurity / Trufflehog-Chrome-Extension
  ☆375Updated 3 years ago
• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆153Updated 5 months ago
• hahwul / authz0
  🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.
  ☆401Updated 3 months ago
• cure53 / Contracts
  A small collection of potentially useful contract templates
  ☆383Updated 2 years ago
• DigeeX / raider
  DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider
  ☆138Updated 3 years ago
• synacktiv / octoscan
  Octoscan is a static vulnerability scanner for GitHub action workflows.
  ☆189Updated 3 weeks ago
• c6fc / warcannon
  High speed/Low cost CommonCrawl RegExp in Node.js
  ☆245Updated 10 months ago
• NetSPI / gcpwn
  Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @Webbi…
  ☆224Updated 5 months ago
• projectdiscovery / openrisk
  openrisk is a tool that generates a risk score based on the results of a Nuclei scan.
  ☆167Updated last week
• doyensec / PESD-Exporter-Extension
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams
  ☆101Updated 2 weeks ago
• trickest / find-gh-poc
  Find CVE PoCs on GitHub
  ☆142Updated last year
• visma-prodsec / confused
  Tool to check for dependency confusion vulnerabilities in multiple package management systems
  ☆708Updated 5 months ago
• Aqua-Nautilus / CVE-Half-Day-Watcher
  ☆292Updated 6 months ago
• akabe1 / OAUTHScan
  Burp Suite Extension useful to verify OAUTHv2 and OpenID security
  ☆169Updated 3 months ago
• Checkmarx / capital
  A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Sec…
  ☆283Updated 10 months ago