Alternatives and similar repositories for OWAAT:

Users that are interested in OWAAT are comparing it to the libraries listed below

• hdm / 2017-BSidesLV-Modern-Recon
  Materials related to the 2017 BSides Las Vegas presentation
  ☆51Updated 4 years ago
• aurainfosec / burp-multi-browser-highlighting
  Highlight Burp proxy requests made by different browsers
  ☆30Updated 7 years ago
• radicallyopensecurity / pentesting-scripts
  Scripts that we use for pentesting
  ☆42Updated 8 years ago
• incredibleindishell / Local-file-disclosure-SQL-Injection-Lab
  This is sample code to demonstrate how one can use SQL Injection vulnerability to download local file from server in specific condition. …
  ☆44Updated 7 years ago
• porterhau5 / BloodHound
  Six Degrees of Domain Admin
  ☆15Updated 7 years ago
• omercnet / BurpJDSer-ng
  BurpJDSer-ng
  ☆27Updated 2 weeks ago
• AppSecConsulting / Pentest-Tools
  Penetration Testing Tools Developed by AppSec Consulting.
  ☆48Updated 6 years ago
• jaredhaight / scripts
  A collection of scripts that I've written while pentesting.
  ☆31Updated 6 years ago
• B34MR / smbShakedown
  A simplified SMB Email Client Attack script used for pentests.
  ☆30Updated 6 years ago
• gr4ym4ntx / attackintel
  A python script to query the MITRE ATT&CK API for tactics, techniques, mitigations, & detection methods for specific threat groups.
  ☆66Updated 6 years ago
• OpenSourcePentest / pitch
  The initial conversation slides and menu of scenarios
  ☆38Updated 3 years ago
• NetSPI / SpoofSpotter
  A tool to catch spoofed NBNS responses.
  ☆50Updated 6 years ago
• infobyte / cscan
  Faraday Continuous Scanning
  ☆33Updated 8 years ago
• jgamblin / nmaptable
  Transform NMap Scans to an D3.js HTML Table
  ☆59Updated 7 years ago
• godinezj / metasploit-framework
  Metasploit Framework
  ☆26Updated 7 years ago
• anilyuk / punydomaincheck
  Puny Domain Name Check
  ☆36Updated 5 years ago
• rascal999 / torc
  Tool orchestrator. Specify targets and run sets of tools against them.
  ☆19Updated 8 years ago
• hvqzao / report-ng
  Generate MS Word template-based reports with HP WebInspect / Burp Suite Pro input, own custom data and knowledge base.
  ☆66Updated last year
• hakbot / hakbot-origin-controller
  Vendor-Neutral Security Tool Automation Controller (over REST)
  ☆29Updated 5 years ago
• iriusrisk / resty-burp
  REST/JSON interface to Burp Suite
  ☆33Updated 4 years ago
• vulnex / Tintorera
  Source Code Intelligence
  ☆30Updated 7 years ago
• viperbluff / WAF_buster
  Disrupt WAF by abusing SSL/TLS Ciphers
  ☆48Updated 6 years ago
• yolosec / deserialize-server
  Demo server for testing Java deserialization payloads
  ☆15Updated 8 years ago
• ornl-sava / nv
  Nessus Vulnerability visualization for the web
  ☆31Updated 9 years ago
• dnet / burp-oauth
  OAuth plugin for Burp Suite Extender
  ☆42Updated 6 years ago
• burp-hash / burp-hash
  ☆32Updated 9 years ago
• ZephrFish / bug-bounty-reference
  Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature
  ☆25Updated 7 years ago
• PortSwigger / replicator
  Burp extension to help developers replicate findings from pen tests
  ☆70Updated 7 months ago
• Intrinsec / comission
  WhiteBox CMS analysis
  ☆69Updated last year
• snyff / oauthsecurity
  OAuth Security Cheatsheet
  ☆39Updated 10 years ago