oshp / oshp-validatorLinks
Venom tests suite to validate an HTTP security response headers configuration against OSHP recommendation.
☆138Updated last month
Alternatives and similar repositories for oshp-validator
Users that are interested in oshp-validator are comparing it to the libraries listed below
Sorting:
- A Broken Application - Very Vulnerable!☆178Updated this week
- Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files☆228Updated last month
- A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Sec…☆314Updated 4 months ago
- Docker toolbox for pentest of web based application.☆172Updated this week
- Runs a scan using Dastardly by Burp Suite against a target site and creates a JUnit XML report for the scan on completion.☆292Updated last year
- ☆86Updated 2 years ago
- The OWASP Secure Headers Project☆178Updated this week
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!☆134Updated 3 years ago
- A humble, and 𝗳𝗮𝘀𝘁, security-oriented HTTP headers analyzer.☆348Updated this week
- ☆124Updated 2 years ago
- OWASP Code Review Guide Web Repository☆146Updated 3 years ago
- Secret Magpie - Secret Detection Tool☆246Updated last year
- OWASP Raider: a novel framework for manipulating the HTTP processes of persistent sessions☆103Updated 2 years ago
- A small tool to help developers understand a huge set of security requirements from appsec teams☆47Updated 3 years ago
- SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applic…☆462Updated last year
- OWASP Project Developer Guide - Document and Project Web pages☆114Updated 2 weeks ago
- CLI component of OWASP PurpleTeam☆134Updated 2 years ago
- OWASP Foundation Web Respository☆22Updated 2 months ago
- Certainly is a offensive security toolkit to capture large amounts of traffic in various network protocols in bitflip and typosquat scena…☆222Updated last year
- Security Auditor Utility for GraphQL APIs☆579Updated last month
- Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …☆315Updated 2 months ago
- A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.☆236Updated last year
- 🧮 An online calculator to assess the risk of web vulnerabilities based on OWASP Risk Assessment☆163Updated 4 years ago
- Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration☆302Updated last week
- Websec interview questions by tib3rius answered☆307Updated 2 years ago
- Host and manage multiple Juice Shop instances for security trainings and Capture The Flags☆303Updated this week
- BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for c…☆436Updated last month
- API Security Vulnerability Scanner designed to help you secure your APIs.☆228Updated last week
- boostsecurityio/lotp☆138Updated 2 months ago
- APIsec|SCAN - Free API security testing using Github actions☆102Updated last year