Alternatives and similar repositories for oshp-validator:

Users that are interested in oshp-validator are comparing it to the libraries listed below

• OWASP / www-project-secure-headers
  The OWASP Secure Headers Project
  ☆151Updated this week
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆114Updated this week
• OWASP / www-project-security-champions-guidebook
  OWASP Foundation Web Respository
  ☆19Updated this week
• NeuraLegion / brokencrystals
  A Broken Application - Very Vulnerable!
  ☆148Updated this week
• boringtools / git-alerts
  Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
  ☆215Updated this week
• trufflesecurity / how-to-rotate
  An open-source collection of API key rotation tutorials.
  ☆65Updated 3 months ago
• x1trap / websec-answers
  Websec interview questions by tib3rius answered
  ☆306Updated last year
• controlplaneio / truffleproc
  truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)
  ☆114Updated last year
• BlazingWind / OWASP-ASVS-4.0-testing-guide
  ☆122Updated last year
• Checkmarx / capital
  A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Sec…
  ☆284Updated 11 months ago
• codingo / dorky
  A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon
  ☆234Updated last year
• OWASP / www-project-developer-guide
  OWASP Project Developer Guide - Document and Project Web pages
  ☆108Updated this week
• righettod / toolbox-pentest-web
  Docker toolbox for pentest of web based application.
  ☆146Updated this week
• OWASP / raider
  OWASP Raider: a novel framework for manipulating the HTTP processes of persistent sessions
  ☆104Updated last year
• rfc-st / humble
  A humble, and 𝗳𝗮𝘀𝘁, security-oriented HTTP headers analyzer.
  ☆305Updated last week
• JavierOlmedo / OWASP-Calculator
  🧮 An online calculator to assess the risk of web vulnerabilities based on OWASP Risk Assessment
  ☆156Updated 3 years ago
• The-Login / DNS-Analysis-Server
  Tools to assess DNS security.
  ☆152Updated last year
• OWASP / OpenCRE
  ☆98Updated last week
• projectdiscovery / openrisk
  openrisk is a tool that generates a risk score based on the results of a Nuclei scan.
  ☆167Updated last month
• domain-protect / domain-protect-gcp
  Protect against subdomain takeover
  ☆93Updated 9 months ago
• dolevf / graphql-cop
  Security Auditor Utility for GraphQL APIs
  ☆432Updated 3 weeks ago
• jhaddix / awsScrape
  A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.
  ☆230Updated last year
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆258Updated 2 weeks ago
• DevSlop / Pixi
  The Pixi module is a MEAN Stack web app with wildly insecure APIs!
  ☆122Updated 2 years ago
• owaspsamm / core
  Core model including reused documentation
  ☆95Updated last week
• nccgroup / ccs
  ☆110Updated last year
• edgeroute / security-champion-framework
  The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
  ☆107Updated last year
• forcesunseen / graphquail
  Burp Suite extension that offers a toolkit for testing GraphQL endpoints.
  ☆191Updated 7 months ago
• synacktiv / nord-stream
  Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …
  ☆272Updated last month
• redhuntlabs / BucketLoot
  BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for c…
  ☆405Updated last month