juerkkil / secheadersLinks
Python script to check HTTP security headers
☆68Updated 2 months ago
Alternatives and similar repositories for secheaders
Users that are interested in secheaders are comparing it to the libraries listed below
Sorting:
- Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops☆44Updated last year
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆110Updated 2 years ago
- AWS S3 Bucket/Object Finder☆123Updated 4 years ago
- A tool geared towards pentesting APIs using OpenAPI definitions.☆185Updated 3 years ago
- AWS Security Checks☆40Updated 8 years ago
- ☆86Updated 3 years ago
- This repository contains an example Python API that is vulnerable to several different web API attacks.☆70Updated 2 years ago
- ASN reconnaissance script☆131Updated 2 years ago
- A collection of response templates for invalid bug bounty reports.☆90Updated 7 years ago
- ☆72Updated 5 years ago
- Damn Vulnerable WordPress Site☆51Updated 2 years ago
- Suite of programs meant to aid in bug hunting and security assessments☆79Updated 6 years ago
- MetaSec.js combines all the free open-source security tools to identify issues with JavaScript and automates the boring parts☆82Updated 3 years ago
- A colorful cross-platform python script to test misconfigurations of AWS S3 buckets both through authenticated and unauthenticated checks…☆39Updated 4 years ago
- ☆29Updated 6 years ago
- All-in-one AWS S3 bucket tool for pentesters.☆74Updated 6 years ago
- Pentesting/Bugbounty Dockerfiles.☆176Updated 4 years ago
- Brute force AWS bucket finder☆62Updated 3 years ago
- A blazing fast & feature rich Amazon S3 bucket enumerator.☆99Updated 3 years ago
- Weaponizing Live CT logs for automated monitoring of assets☆134Updated 4 years ago
- ☆54Updated last year
- Ugly Duckling is a lightweight scanner built specifically for our Crowdsource community to submit proof-of-concept modules☆187Updated 4 years ago
- Security checks for http headers and cookies☆27Updated 4 years ago
- BurpSuite using the document and some extensions☆72Updated 5 years ago
- A very vulnerable implementation of a GraphQL API.☆61Updated 4 years ago
- Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.☆158Updated 6 months ago
- The OWASP Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and…☆78Updated 6 years ago
- Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.☆93Updated 7 months ago
- Python utility to takeover domains vulnerable to AWS NS Takeover☆87Updated 3 years ago
- drHEADer helps with the audit of security headers received in response to a single request or a list of requests.☆112Updated last year