Alternatives and similar repositories for vulnerable-api

Users that are interested in vulnerable-api are comparing it to the libraries listed below

• jorritfolmer / vulnerable-api
  Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops
  ☆44Updated last year
• secdec / attack-surface-detector-burp
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆110Updated 2 years ago
• ignis-sec / puff
  Clientside vulnerability / reflected xss fuzzer
  ☆149Updated 2 years ago
• orlyjamie / asnrecon
  ASN reconnaissance script
  ☆130Updated last year
• rahulunair / vulnerable-api
  This repository contains an example Python API that is vulnerable to several different web API attacks.
  ☆27Updated 6 years ago
• LewisArdern / metasecjs
  MetaSec.js combines all the free open-source security tools to identify issues with JavaScript and automates the boring parts
  ☆82Updated 2 years ago
• appsecco / dvja
  Damn Vulnerable Java (EE) Application
  ☆144Updated last year
• tarunkant / EndPoint-Finder
  Finds the End-Points in JavaScript files
  ☆97Updated 4 years ago
• PortSwigger / aws-security-checks
  AWS Security Checks
  ☆40Updated 7 years ago
• detectify / cs-challenge
  Detectify Crowdsource Challenge
  ☆70Updated 3 years ago
• tdr130 / assetnote
  Push notifications for passive DNS data
  ☆110Updated 9 years ago
• chennylmf / OWASP-Web-App-Pentesting-checklists
  ☆72Updated 5 years ago
• fellchase / flumberboozle
  Suite of programs meant to aid in bug hunting and security assessments
  ☆78Updated 6 years ago
• lc / brute53
  A tool to bruteforce nameservers when working with subdomain delegations to AWS.
  ☆58Updated 6 years ago
• gocaio / sct
  Security checks for http headers and cookies
  ☆27Updated 4 years ago
• redhuntlabs / Project-Resonance
  ☆54Updated 11 months ago
• yogisec / VulnerableSAMLApp
  Vulnerable SAML infrastructure training applicaiton
  ☆54Updated 2 years ago
• JGillam / burp-paramalyzer
  Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.
  ☆159Updated 5 months ago
• ptswarm / ptswarm-twitter
  ☆76Updated 5 years ago
• RhinoSecurityLabs / Swagger-EZ
  A tool geared towards pentesting APIs using OpenAPI definitions.
  ☆182Updated 3 years ago
• codingo / Bugcrowd-Talks
  Slide Decks and Supporting Content of talks given for Bugcrowd
  ☆17Updated 5 years ago
• BuffaloWill / burpsuite-project-file-parser
  A Burp Suite Extension for parsing Project Files from the CLI.
  ☆87Updated last year
• Quitten / XSSor
  XSSor is a semi-automatic reflected and persistent XSS detector extension for Burp Suite. The tool was written in Python by Barak Tawily,…
  ☆62Updated 4 years ago
• In3tinct / Taken
  Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.
  ☆93Updated 5 months ago
• securityidiots / CollabOzark
  CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE, External Resource Access payloads triggers.
  ☆135Updated 6 years ago
• lc / jenkinz
  Retrieve the complete build history for every job ever created and executed on a given Jenkins instance.
  ☆67Updated 8 months ago
• JR0ch17 / S3Cruze
  All-in-one AWS S3 bucket tool for pentesters.
  ☆73Updated 6 years ago
• rinetd / BurpSuite-1
  BurpSuite using the document and some extensions
  ☆72Updated 5 years ago
• Vanshal / AWAE-PREP
  ☆17Updated 4 years ago
• randorisec / workshops
  ☆27Updated 5 years ago