Alternatives and similar repositories for cq

Users that are interested in cq are comparing it to the libraries listed below

• synacktiv / DepFuzzer
  ☆92Updated 2 months ago
• cybervelia / graphicator
  A GraphQL enumeration and extraction tool
  ☆133Updated 2 years ago
• dillonfranke / protoburp
  Encode and Fuzz Custom Protobuf Messages in Burp Suite
  ☆35Updated 9 months ago
• ariary / cfuzz
  Command line fuzzer and bruteforcer 🌪 wfuzz for command
  ☆91Updated 3 years ago
• SonarSource / argument-injection-vectors
  A curated list of argument injection vectors
  ☆41Updated 10 months ago
• mandiant / heyserial
  Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, an…
  ☆144Updated 2 years ago
• OfriOuzan / HardeningMeter
  HardeningMeter is an open-source Python tool carefully designed to comprehensively assess the security hardening of binaries and systems.
  ☆65Updated last year
• zer1t0 / awsenum
  Enumerate AWS permissions and resources.
  ☆71Updated 3 years ago
• nccgroup / ccs
  ☆114Updated 2 years ago
• wavestone-cdt / DEFCON-CICD-pipelines-workshop
  ☆94Updated 3 years ago
• RootUp / PersonalStuff
  Upload files done during my research.
  ☆167Updated last week
• RefactorSecurity / vscode-security-notes
  Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝
  ☆140Updated last month
• stolenusername / cowitness
  CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to …
  ☆125Updated last year
• carlospolop / Bruteforce-GCP-Permissions
  Use the GCP testIamPermissions functionality to bruteforce and discover your permissions
  ☆42Updated 5 months ago
• doyensec / cloudsec-tidbits
  Blogpost series showcasing interesting cloud - web app security bugs
  ☆50Updated 2 years ago
• doyensec / PESD-Exporter-Extension
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams
  ☆106Updated 10 months ago
• nodyhub / zipslipper
  Create tar/zip archives that try to exploit zipslip vulnerability.
  ☆48Updated last year
• doyensec / oidc-ssrf
  An Evil OIDC Server
  ☆54Updated 3 years ago
• pentagridsec / archive_pwn
  A Python-based tool to create zip, tar and cpio archives to exploit common archive library issues and developer mistakes
  ☆43Updated 3 weeks ago
• elttam / rsu-cracker
  ☆33Updated 2 years ago
• federicodotta / semgrep-rules
  A collection of my Semgrep rules
  ☆50Updated 2 years ago
• saw-your-packet / EC2StepShell
  EC2StepShell is an AWS post-exploitation tool for getting high privileges reverse shells in public or private EC2 instances.
  ☆68Updated last year
• clearbluejar / cve-markdown-charts
  A simple tool to create mermaid js markdown charts from CVE IDs and CVE keyword searches.
  ☆45Updated 3 years ago
• 0ca / BoxPwnr
  An experimental project exploring the use of Large Language Models (LLMs) to solve HackTheBox machines autonomously.
  ☆185Updated 2 weeks ago
• Antonlovesdnb / DockerDetectionNotes
  Some of my rough notes for Docker threat detection
  ☆48Updated 2 years ago
• redrays-io / WS_RaceCondition_PoC
  Simple PoC for demonstrating Race Conditions on Websockets
  ☆55Updated 2 years ago
• snyk / socketsleuth
  Burp Extension to add additional functionality for pentesting websocket based applications
  ☆100Updated 3 months ago
• vulnerable-apps / awesome-vulnerable
  A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.
  ☆47Updated 2 years ago
• nccgroup / jwt-reauth
  ☆106Updated 2 years ago
• chris-anley / cq
  CQ, a code security scanner
  ☆100Updated last year