Alternatives and similar repositories for vulnerable-api

Users that are interested in vulnerable-api are comparing it to the libraries listed below

• jorritfolmer / vulnerable-api
  Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops
  ☆42Updated last year
• rahulunair / vulnerable-api
  This repository contains an example Python API that is vulnerable to several different web API attacks.
  ☆27Updated 6 years ago
• ignis-sec / puff
  Clientside vulnerability / reflected xss fuzzer
  ☆150Updated last year
• secdec / attack-surface-detector-burp
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆103Updated last year
• JGillam / burp-paramalyzer
  Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.
  ☆156Updated last month
• Vanshal / AWAE-PREP
  ☆17Updated 4 years ago
• BuffaloWill / burpsuite-project-file-parser
  A Burp Suite Extension for parsing Project Files from the CLI.
  ☆87Updated 7 months ago
• yogisec / VulnerableSAMLApp
  Vulnerable SAML infrastructure training applicaiton
  ☆53Updated 2 years ago
• LewisArdern / metasecjs
  MetaSec.js combines all the free open-source security tools to identify issues with JavaScript and automates the boring parts
  ☆80Updated 2 years ago
• devanshbatham / CertEagle
  Weaponizing Live CT logs for automated monitoring of assets
  ☆133Updated 3 years ago
• lc / brute53
  A tool to bruteforce nameservers when working with subdomain delegations to AWS.
  ☆58Updated 5 years ago
• punk-AJ / oscpnotes
  These are my notes for OSCP preparation. Hope you'll find them useful.
  ☆14Updated 6 years ago
• detectify / cs-challenge
  Detectify Crowdsource Challenge
  ☆69Updated 3 years ago
• ozguralp / synackapi
  ☆61Updated 9 months ago
• incogbyte / jsearch
  ☆30Updated 4 years ago
• ShiftLeftSecurity / tarpit-java
  Tarpit - A Web application seeded with vulnerabilities, rootkits, backdoors & data leaks
  ☆79Updated 2 years ago
• JR0ch17 / S3Cruze
  All-in-one AWS S3 bucket tool for pentesters.
  ☆73Updated 6 years ago
• JordyZomer / autoSubTakeover
  A tool used to check if a CNAME resolves to the scope address. If the CNAME resolves to a non-scope address it might be worth checking ou…
  ☆135Updated last year
• tdr130 / assetnote
  Push notifications for passive DNS data
  ☆109Updated 9 years ago
• MistSpark / DNS-Wordlists
  part of my wordlist to bruteforce DNS to find subdoamains.
  ☆61Updated 3 years ago
• dewhurstsecurity / api_paths
  A list of REST API URL paths for use in blackbox API end-point discovery
  ☆25Updated 6 years ago
• PortSwigger / aws-security-checks
  AWS Security Checks
  ☆39Updated 7 years ago
• szski / shapeshifter
  GraphQL security testing tool
  ☆122Updated 3 years ago
• DFC302 / BugBountyTemplate
  A simple Cherry Tree template that can be used to organize bug bounties
  ☆37Updated 5 years ago
• war-and-code / akamai-arl-hack
  Script to test open Akamai ARL vulnerability.
  ☆71Updated 3 years ago
• TROUBLE-1 / Type-juggling
  Lab that will help you to understand how type juggling vulnerability works.
  ☆22Updated 4 years ago
• Quitten / XSSor
  XSSor is a semi-automatic reflected and persistent XSS detector extension for Burp Suite. The tool was written in Python by Barak Tawily,…
  ☆56Updated 4 years ago
• GoonSecurity / Rupert
  ☆20Updated last year
• codewatchorg / Burp-UserAgent
  Automatically modify the User-Agent header in all Burp requests
  ☆57Updated 7 years ago
• In3tinct / Taken
  Takeover AWS ips and have a working POC for Subdomain Takeover.
  ☆91Updated 2 months ago