Alternatives and similar repositories for securityheaders

Users that are interested in securityheaders are comparing it to the libraries listed below

• ShielderSec / webtech
  Identify technologies used on websites.
  ☆292Updated 2 years ago
• juerkkil / secheaders
  Python script to check HTTP security headers
  ☆68Updated 2 months ago
• JoshuaMart / AutoRecon
  Simple shell script for automated domain recognition with some tools
  ☆304Updated 5 years ago
• AvasDream / pentesting-dockerfiles
  Pentesting/Bugbounty Dockerfiles.
  ☆176Updated 4 years ago
• koenrh / s3enum
  Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.
  ☆262Updated last week
• dxa4481 / truffleHogRegexes
  These are the regexes that power truffleHog
  ☆223Updated 3 years ago
• szski / shapeshifter
  GraphQL security testing tool
  ☆126Updated 3 years ago
• root4loot / rescope
  Bugbounty scope tool
  ☆332Updated 10 months ago
• N0MoreSecr3ts / wraith
  Uncover forgotten secrets and bring them back to life, haunting security and operations teams.
  ☆209Updated 2 years ago
• tomdev / teh_s3_bucketeers
  ☆276Updated 4 years ago
• antichown / subdomain-takeover
  Subdomain Takeover Scanner | Subdomain Takeover Tool | by 0x94
  ☆366Updated 2 years ago
• LewisArdern / bXSS
  bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
  ☆563Updated 2 years ago
• BishopFox / smogcloud
  Find cloud assets that no one wants exposed 🔎 ☁️
  ☆350Updated 5 years ago
• 0xSearches / sandcastle
  🏰 A Python script for AWS S3 bucket enumeration.
  ☆145Updated 3 years ago
• allyomalley / dnsobserver
  A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for…
  ☆192Updated 5 years ago
• gwen001 / s3-buckets-finder
  Find AWS S3 buckets and test their permissions.
  ☆396Updated 2 years ago
• secdec / attack-surface-detector-burp
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆110Updated 2 years ago
• aress31 / openapi-parser
  Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in …
  ☆206Updated 2 years ago
• Shivangx01b / CorsMe
  Cross Origin Resource Sharing MisConfiguration Scanner
  ☆174Updated 4 years ago
• detectify / ugly-duckling
  Ugly Duckling is a lightweight scanner built specifically for our Crowdsource community to submit proof-of-concept modules
  ☆187Updated 4 years ago
• Plazmaz / leaky-repo
  Benchmarking repo for secrets scanning
  ☆241Updated last year
• RhinoSecurityLabs / Swagger-EZ
  A tool geared towards pentesting APIs using OpenAPI definitions.
  ☆183Updated 3 years ago
• Static-Flow / gofingerprint
  GoFingerprint is a Go tool for taking a list of target web servers and matching their HTTP responses against a user defined list of fing…
  ☆206Updated 2 years ago
• secdec / attack-surface-detector-cli
  ☆86Updated 3 years ago
• prodigysml / Dr.-Watson
  Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information! It's yo…
  ☆218Updated 6 years ago
• proabiral / inception
  A highly configurable Framework for easy automated web scanning
  ☆380Updated 5 years ago
• RUB-NDS / CORStest
  A simple CORS misconfiguration scanner
  ☆423Updated 5 years ago
• 0xbharath / censys-enumeration
  A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys
  ☆152Updated 3 years ago
• jobertabma / transformations
  ☆173Updated 2 years ago
• NotSoSecure / cloud-service-enum
  ☆260Updated last year