Alternatives and similar repositories for VCG:

Users that are interested in VCG are comparing it to the libraries listed below

• pumasecurity / puma-scan
  Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams wr…
  ☆449Updated 2 years ago
• scovetta / yasca
  Yet Another Source Code Analyzer
  ☆183Updated 2 years ago
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆589Updated 3 years ago
• jerryhoff / WebGoat.NET
  OWASP WebGoat.NET
  ☆226Updated last year
• vmware / burp-rest-api
  REST/JSON API to the Burp Suite security tool.
  ☆550Updated 7 months ago
• SecurityInnovation / AuthMatrix
  AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
  ☆618Updated 10 months ago
• RUB-NDS / WS-Attacker
  WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr …
  ☆476Updated 3 months ago
• Fuzzapi / fuzzapi
  Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem
  ☆643Updated 3 years ago
• CSPF-Founder / JavaVulnerableLab
  Vulnerable Java based Web Application
  ☆260Updated 6 months ago
• h3xstream / http-script-generator
  ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
  ☆290Updated last year
• secvulture / dvta
  Damn Vulnerable Thick Client App
  ☆146Updated 4 years ago
• federicodotta / Java-Deserialization-Scanner
  All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities
  ☆778Updated 3 years ago
• sectooladdict / wavsep
  The Web Application Vulnerability Scanner Evaluation Project
  ☆232Updated 2 years ago
• NetSPI / JavaSerialKiller
  Burp extension to perform Java Deserialization Attacks
  ☆209Updated 11 months ago
• NickstaDB / DeserLab
  Java deserialization exploitation lab.
  ☆237Updated 5 years ago
• wireghoul / graudit
  grep rough audit - source code auditing tool
  ☆1,566Updated 3 weeks ago
• nccgroup / freddy
  Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
  ☆574Updated 3 years ago
• NetSPI / PESecurity
  PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.
  ☆629Updated 5 months ago
• mazen160 / struts-pwn_CVE-2017-9805
  An exploit for Apache Struts CVE-2017-9805
  ☆249Updated 7 years ago
• doyensec / burpdeveltraining
  Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"
  ☆349Updated 4 years ago
• VirtueSecurity / aws-extender
  AWS Extender (Cloud Storage Tester) is a Burp plugin to assess permissions of cloud storage containers on AWS, Google Cloud and Azure.
  ☆245Updated 2 years ago
• lanjelot / kb
  All my infosec notes I have been building up over the years
  ☆328Updated 3 years ago
• YalcinYolalan / WSSAT
  WEB SERVICE SECURITY ASSESSMENT TOOL
  ☆386Updated 3 years ago
• s4n7h0 / Halcyon-IDE
  First IDE for Nmap Script (NSE) Development.
  ☆356Updated 4 years ago
• pornin / TestSSLServer
  ☆140Updated 2 years ago
• sqlmapproject / testenv
  A collection of web pages vulnerable to SQL injection flaws
  ☆346Updated 2 years ago
• h3xstream / burp-retire-js
  Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.
  ☆200Updated 7 months ago
• ewilded / shelling
  SHELLING - a comprehensive OS command injection payload generator
  ☆440Updated 4 years ago
• nccgroup / LoggerPlusPlus
  Advanced Burp Suite Logging Extension
  ☆636Updated 7 months ago