Alternatives and similar repositories for OWASP-Testing-Guide:

Users that are interested in OWASP-Testing-Guide are comparing it to the libraries listed below

• 4ARMED / terraform-burp-collaborator
  Terraform configuration to build a Burp Private Collaborator Server
  ☆25Updated 7 years ago
• afxdub / http-screenshot-html
  NMAP NSE script that scans for http(s) server, takes a screenshot of them, and organizes the results into an HTML report.
  ☆27Updated 10 years ago
• royharoush / DistributedScanning
  introduction to distributed scanning using vultr
  ☆11Updated 7 years ago
• smiegles / certs
  Parse X509 certificates to get the (sub)domains in it.
  ☆28Updated 6 years ago
• hvqzao / burp-token-rewrite
  Burp extension for automated handling of CSRF tokens
  ☆16Updated 6 years ago
• vulp1n3 / Aggressor_Scripts
  Scripts for automating actions in Cobalt Strike
  ☆11Updated 8 years ago
• r4wd3r / ADPWN
  Useful Windows and AD tools
  ☆15Updated 3 years ago
• AdrianCitu / burp-tabnabbing-extension
  Burp Suite Professional extension in Java for Tabnabbing attack
  ☆13Updated 6 years ago
• NetSPI / JIG
  Jira Information Gatherer
  ☆29Updated 7 years ago
• allfro / dotNetBeautifier
  A BurpSuite extension for beautifying .NET message parameters and hiding some of the extra clutter that comes with .NET web apps (i.e. __…
  ☆12Updated 9 years ago
• summitt / sploits
  Quickly add http and https domains to BurpSuite's scope with all paths.
  ☆16Updated 8 years ago
• l0ss / Chump2Trump
  Slides from my AD Privesc talk at WAHCKon 2017
  ☆16Updated 7 years ago
• snyff / oauthsecurity
  OAuth Security Cheatsheet
  ☆39Updated 10 years ago
• nccgroup / JDSer-ngng
  A Burp Extender plugin, that will deserialized java objects and encode them in XML using the Xtream library.
  ☆25Updated 9 years ago
• ecbftw / poc
  A collection of published exploits and proof-of-concept code.
  ☆21Updated 7 years ago
• PwnDexter / FindFrontableDomains
  Forked and updated with some additional features over the original
  ☆16Updated 3 years ago
• ConsciousHacker / GreatSCT
  The project is called GreatSCT (Great Scott). GreatSCT is an open source project to generate application white list bypasses. This tool i…
  ☆29Updated 6 years ago
• shieldfy / AVWA
  Advanced Vulnerable Web Application (AVWA)
  ☆14Updated 7 years ago
• mpgn / ntlmrelayx-prettyloot
  Convert the loot directory of ntlmrelayx into an enum4linux like output
  ☆21Updated 4 years ago
• andresriancho / nimbostratus-target
  This repository holds a target infrastructure you can use for running the nimbostratus tools.
  ☆23Updated 9 years ago
• s7acktrac3 / OSCE-Exploit-Scripts
  Updated 6 years ago
• V1V1 / AIX-for-Penetration-Testers
  A basic AIX enumeration guide for penetration testers/red teamers
  ☆32Updated 7 years ago
• iriusrisk / RopeyTasks
  Deliberately vulnerable web application
  ☆22Updated 7 years ago
• jmxploit / jmxploit
  A tool to analyse JMX API security level.
  ☆43Updated 10 years ago
• stufus / ADEGrab
  Standalone Windows tool to automatically retrieve Sysinternals' AD Explorer search output from the ListView control and save/copy to clip…
  ☆35Updated 8 years ago
• silentsignal / wpc
  Windows Privesc Check
  ☆20Updated 10 years ago
• cheetz / generateJenkinsExploit
  ☆29Updated 6 years ago
• alexlauerman / ms10-070CheckPatch
  Check for .net padding oracle patch
  ☆19Updated 6 years ago
• woanware / application-restriction-bypasses
  A set of compiled application restriction bypasses
  ☆29Updated 7 years ago
• phin3has / docker-pentest-lists
  Docker Pentest Lists are collection of Dockerfiles or Links to Dockerfiles for containers used in Penetration Tests
  ☆21Updated 7 years ago