Alternatives and similar repositories for low-hanging:

Users that are interested in low-hanging are comparing it to the libraries listed below

• laconicwolf / cors-scanner
  A multi-threaded scanner that helps identify CORS flaws/misconfigurations
  ☆19Updated 5 years ago
• PortSwigger / burp-smart-buster
  A Burp Suite content discovery plugin that add the smart into the Buster!
  ☆31Updated 7 years ago
• FSecureLABS / timeinator
  Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.
  ☆22Updated last year
• Den1al / pymassdns
  A Pythonic wrapper to MassDNS
  ☆24Updated 7 years ago
• RUB-NDS / SAML-XXE-Test
  Simple XXE test suite generated specifically for SAML interfaces
  ☆22Updated 6 years ago
• snyff / oauthsecurity
  OAuth Security Cheatsheet
  ☆40Updated 10 years ago
• gwen001 / testxss
  PHP tool to test XSS
  ☆22Updated 5 years ago
• cybernova / DNSaxfr
  Shell script for testing DNS zone transfer (AXFR query) on domains and subdomains recursively.
  ☆49Updated 4 years ago
• eur0pa / goGetBucket
  A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.
  ☆27Updated 6 years ago
• tmendo / BurpIntruderFilePayloadGenerator
  Burp Intruder File Payload Generator
  ☆18Updated 5 years ago
• rojan-rijal / ReconUI
  Alpha version code of Recon UI
  ☆14Updated 7 years ago
• adityaks / sparty
  Sparty - MS Sharepoint and Frontpage Auditing Tool
  ☆31Updated 10 years ago
• nccgroup / clickjacking-poc
  Clickjacking PoC Generator
  ☆35Updated 4 years ago
• silentsignal / ActiveScan3Plus
  Modified version of ActiveScan++ Burp Suite extension
  ☆31Updated 8 years ago
• laconicwolf / Dirscover
  A multi-processed, multi-threaded scanner to discover web directories on multiple URLs.
  ☆21Updated 5 years ago
• kugg / tclscan
  Scans tcl for command injection
  ☆36Updated 5 years ago
• riyazwalikar / injection-attacks-nosql-talk
  Slides of the talk on Injection attacks in apps with NoSQL Backends, given at null OWASP Bangalore monthly meet on 27th April 2019
  ☆22Updated 5 years ago
• BountyMachine / about
  A central place to keep track of relevant BountyMachine talks, blogs, and interesting things!
  ☆33Updated 6 years ago
• nccgroup / wstalker
  WStalker: an easy proxy
  ☆25Updated 4 years ago
• DFC302 / subseeker
  A sub-domain enumeration tool
  ☆19Updated 4 years ago
• tls-attacker / TLS-Attacker-BurpExtension
  ☆38Updated 4 years ago
• random-robbie / s3-tko
  AWS S3 Bucket Finder.
  ☆15Updated 5 years ago
• infosec-au / webappsec-toolkit
  Web Application Security related tools. Includes backdoors, proof of concepts and tricks
  ☆37Updated 10 years ago
• lkorba / enumsh
  ☆10Updated 5 years ago
• 1N3 / CloudHunter
  Find unreferenced AWS S3 buckets which have CloudFront CNAME records pointing to them
  ☆37Updated 6 years ago
• MrTaherAmine / pentest-management
  Simple webinterface combining different recon tools.
  ☆12Updated 7 years ago
• dariusztytko / progress-burp
  Burp Suite extension to track vulnerability assessment progress
  ☆59Updated 5 years ago
• smiegles / certs
  Parse X509 certificates to get the (sub)domains in it.
  ☆28Updated 6 years ago
• Cillian-Collins / Recon
  The Recon scanning tool scans websites for open files & directories specified in the custom config file. Default server configuration fil…
  ☆15Updated 7 years ago
• bayotop / sink-logger
  Transparently log all data passed into known JavaScript sinks - Sink Logger extension for Burp.
  ☆49Updated 2 years ago