Alternatives and similar repositories for Astra

Users that are interested in Astra are comparing it to the libraries listed below

• Ekultek / WhatWaf
  Detect and bypass web application firewalls and protection systems
  ☆2,786Updated 10 months ago
• almandin / fuxploider
  File upload vulnerability scanner and exploitation tool.
  ☆3,215Updated last month
• owtf / owtf
  Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.o…
  ☆1,875Updated 2 weeks ago
• sa7mon / S3Scanner
  Scan for misconfigured S3 buckets across S3-compatible APIs!
  ☆2,805Updated 3 weeks ago
• infobyte / faraday
  Open Source Vulnerability Management Platform
  ☆5,485Updated 3 weeks ago
• michenriksen / aquatone
  A Tool for Domain Flyovers
  ☆5,783Updated 3 years ago
• s0md3v / Arjun
  HTTP parameter discovery suite.
  ☆5,699Updated 4 months ago
• commixproject / commix
  Automated All-in-One OS Command Injection Exploitation Tool.
  ☆5,312Updated this week
• snoopysecurity / awesome-burp-extensions
  A curated list of amazingly awesome Burp Extensions
  ☆3,212Updated 4 months ago
• cujanovic / SSRF-Testing
  SSRF (Server Side Request Forgery) testing resources
  ☆2,411Updated 8 months ago
• GerbenJavado / LinkFinder
  A python script that finds endpoints in JavaScript files
  ☆3,984Updated last year
• epinna / tplmap
  Server-Side Template Injection and Code Injection Detection and Exploitation Tool
  ☆3,953Updated last year
• archerysec / archerysec
  ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.
  ☆2,387Updated 2 weeks ago
• codingo / NoSQLMap
  Automated NoSQL database enumeration and web application exploitation tool.
  ☆3,090Updated 2 weeks ago
• ticarpi / jwt_tool
  A toolkit for testing, tweaking and cracking JSON Web Tokens
  ☆5,927Updated last month
• xmendez / wfuzz
  Web application fuzzer
  ☆6,201Updated 10 months ago
• swisskyrepo / SSRFmap
  Automatic SSRF fuzzer and exploitation tool
  ☆3,232Updated 4 months ago
• j3ssie / osmedeus
  A Workflow Engine for Offensive Security
  ☆5,652Updated last month
• jaeles-project / jaeles
  The Swiss Army knife for automated Web Application Testing
  ☆2,252Updated last year
• wireghoul / graudit
  grep rough audit - source code auditing tool
  ☆1,621Updated last month
• haccer / subjack
  Subdomain Takeover tool written in Go
  ☆1,979Updated last year
• Fuzzapi / fuzzapi
  Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem
  ☆656Updated 4 years ago
• andresriancho / w3af
  w3af: web application attack and audit framework, the open source web vulnerability scanner.
  ☆4,732Updated 2 years ago
• 1N3 / IntruderPayloads
  A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and…
  ☆3,815Updated 3 years ago
• blechschmidt / massdns
  A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)
  ☆3,363Updated 3 weeks ago
• infosec-au / altdns
  Generates permutations, alterations and mutations of subdomains and then resolves them
  ☆2,418Updated 5 months ago
• EnableSecurity / wafw00f
  WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
  ☆5,711Updated 5 months ago
• gquere / pwn_jenkins
  Notes about attacking Jenkins servers
  ☆2,062Updated 11 months ago
• scipag / vulscan
  Advanced vulnerability scanning with Nmap NSE
  ☆3,632Updated 9 months ago
• Findomain / Findomain
  The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, su…
  ☆3,492Updated 2 months ago