Alternatives and similar repositories for OWASP-Testing-Guide:

Users that are interested in OWASP-Testing-Guide are comparing it to the libraries listed below

• AdrianCitu / burp-tabnabbing-extension
  Burp Suite Professional extension in Java for Tabnabbing attack
  ☆13Updated 6 years ago
• 4ARMED / terraform-burp-collaborator
  Terraform configuration to build a Burp Private Collaborator Server
  ☆25Updated 7 years ago
• r4wd3r / ADPWN
  Useful Windows and AD tools
  ☆15Updated 3 years ago
• hvqzao / burp-token-rewrite
  Burp extension for automated handling of CSRF tokens
  ☆16Updated 7 years ago
• ConsciousHacker / GreatSCT
  The project is called GreatSCT (Great Scott). GreatSCT is an open source project to generate application white list bypasses. This tool i…
  ☆29Updated 6 years ago
• rebujacker / SiestaTime
  Red Team Automation tool powered by go and terraform
  ☆28Updated 3 years ago
• afxdub / http-screenshot-html
  NMAP NSE script that scans for http(s) server, takes a screenshot of them, and organizes the results into an HTML report.
  ☆27Updated 10 years ago
• GoSecure / gophish-cli
  Gophish Python cli to perform huge phishing campaigns
  ☆40Updated 6 years ago
• smiegles / certs
  Parse X509 certificates to get the (sub)domains in it.
  ☆28Updated 6 years ago
• DiscipleOfDust / autoBOF
  ☆23Updated 4 years ago
• nixwizard / kube-alien
  ☆25Updated 3 years ago
• bad-hombres / supertty
  Reverse or bind shell catcher which uprgrades the caught shell to be more like a regular shell
  ☆27Updated 6 years ago
• jacob-baines / longtime-sunshine
  Nashorn Post Exploitation
  ☆32Updated 7 years ago
• PwnDexter / FindFrontableDomains
  Forked and updated with some additional features over the original
  ☆16Updated 4 years ago
• Keramas / Blowhole
  Docker auditing and enumeration script.
  ☆22Updated 5 years ago
• Malicious-Entity / Get-Entity
  Scripts to query local admins quickly
  ☆9Updated 9 years ago
• tevora-threat / splunk_pentest_app
  splunk_pentest_app
  ☆51Updated 8 years ago
• ecbftw / poc
  A collection of published exploits and proof-of-concept code.
  ☆21Updated 7 years ago
• phin3has / docker-pentest-lists
  Docker Pentest Lists are collection of Dockerfiles or Links to Dockerfiles for containers used in Penetration Tests
  ☆21Updated 7 years ago
• snyff / oauthsecurity
  OAuth Security Cheatsheet
  ☆39Updated 10 years ago
• attactics / cslogwatch
  Cobalt Strike log state tracking, parsing, and storage
  ☆23Updated 5 years ago
• InitRoot / shareAttack
  Automatically attack all file shares within AD network environment. Exploiting weak permissions.
  ☆17Updated 5 years ago
• SecurityRiskAdvisors / Burp-Load-Balancer-Cookie-Scanner
  Burp extension to find and decode BigIP and Netscaler cookies
  ☆15Updated 6 years ago
• l0ss / Chump2Trump
  Slides from my AD Privesc talk at WAHCKon 2017
  ☆16Updated 7 years ago
• V1V1 / AIX-for-Penetration-Testers
  A basic AIX enumeration guide for penetration testers/red teamers
  ☆32Updated 7 years ago
• stufus / ADEGrab
  Standalone Windows tool to automatically retrieve Sysinternals' AD Explorer search output from the ListView control and save/copy to clip…
  ☆35Updated 8 years ago
• GoSecure / burp-ntlm-challenge-decoder
  Burp extension to decode NTLM SSP headers and extract domain/host information
  ☆31Updated 4 years ago
• alexlauerman / ms10-070CheckPatch
  Check for .net padding oracle patch
  ☆19Updated 6 years ago
• blacklanternsecurity / Convert-Invoke-Kerberoast
  Converts the output from Invoke-Kerberoast into hashcat format.
  ☆32Updated 6 years ago
• andresriancho / vpc-vpn-pivot
  Pivot into private VPC networks using a VPN connection
  ☆41Updated 5 years ago