oshp / oshp-validatorLinks
Venom tests suite to validate an HTTP security response headers configuration against OSHP recommendation.
☆138Updated last month
Alternatives and similar repositories for oshp-validator
Users that are interested in oshp-validator are comparing it to the libraries listed below
Sorting:
- The OWASP Secure Headers Project☆182Updated this week
- A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Sec…☆315Updated 5 months ago
- A Broken Application - Very Vulnerable!☆180Updated this week
- Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files☆227Updated 2 months ago
- ☆124Updated 2 years ago
- A humble, and 𝗳𝗮𝘀𝘁, security-oriented HTTP headers analyzer.☆349Updated last week
- Docker toolbox for pentest of web based application.☆173Updated this week
- 🧮 An online calculator to assess the risk of web vulnerabilities based on OWASP Risk Assessment☆163Updated 4 years ago
- Security Auditor Utility for GraphQL APIs☆585Updated 2 months ago
- SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applic…☆463Updated last year
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!☆132Updated 3 years ago
- ☆84Updated 2 years ago
- Secret Magpie - Secret Detection Tool☆246Updated last year
- OWASP Raider: a novel framework for manipulating the HTTP processes of persistent sessions☆102Updated 2 years ago
- Check any website (or set of websites) for insecure security headers.☆255Updated 2 years ago
- Runs a scan using Dastardly by Burp Suite against a target site and creates a JUnit XML report for the scan on completion.☆294Updated last year
- Host and manage multiple Juice Shop instances for security trainings and Capture The Flags☆305Updated last week
- Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.☆278Updated last year
- openrisk is a tool that generates a risk score based on the results of a Nuclei scan.☆180Updated 3 weeks ago
- GraphQL threat framework used by security professionals to research security gaps in GraphQL implementations☆339Updated 6 months ago
- Gram is Klarna's own threat model diagramming tool☆329Updated 3 weeks ago
- BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for c…☆436Updated 3 weeks ago
- drHEADer helps with the audit of security headers received in response to a single request or a list of requests.☆112Updated last year
- The Internets #1 Subdomain Takeover Tool☆293Updated 7 months ago
- ☆114Updated 2 years ago
- Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …☆312Updated 3 months ago
- OWASP Project Developer Guide - Document and Project Web pages☆114Updated last week
- A collection of awesome AWS S3 tools that collects and enumerates exposed S3 buckets☆406Updated 3 weeks ago
- GraphQL automated security testing toolkit☆332Updated last year
- CLI component of OWASP PurpleTeam☆133Updated 2 years ago