Alternatives and similar repositories for oshp-validator

Users that are interested in oshp-validator are comparing it to the libraries listed below

• OWASP / www-project-secure-headers
  The OWASP Secure Headers Project
  ☆184Updated this week
• Checkmarx / capital
  A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Sec…
  ☆319Updated 5 months ago
• NeuraLegion / brokencrystals
  A Broken Application - Very Vulnerable!
  ☆181Updated this week
• boringtools / git-alerts
  Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
  ☆229Updated 2 weeks ago
• PortSwigger / dastardly-github-action
  Runs a scan using Dastardly by Burp Suite against a target site and creates a JUnit XML report for the scan on completion.
  ☆294Updated last year
• BlazingWind / OWASP-ASVS-4.0-testing-guide
  ☆124Updated 2 years ago
• righettod / toolbox-pentest-web
  Docker toolbox for pentest of web based application.
  ☆176Updated this week
• optiv / rest-api-goat
  ☆84Updated 2 years ago
• dolevf / graphql-cop
  Security Auditor Utility for GraphQL APIs
  ☆598Updated 2 months ago
• punk-security / secret-magpie
  Secret Magpie - Secret Detection Tool
  ☆246Updated last year
• DevSlop / Pixi
  The Pixi module is a MEAN Stack web app with wildly insecure APIs!
  ☆132Updated 3 years ago
• juice-shop / multi-juicer
  Host and manage multiple Juice Shop instances for security trainings and Capture The Flags
  ☆308Updated this week
• dub-flow / sessionprobe
  SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applic…
  ☆465Updated last year
• synacktiv / nord-stream
  Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …
  ☆314Updated 2 weeks ago
• JavierOlmedo / OWASP-Calculator
  🧮 An online calculator to assess the risk of web vulnerabilities based on OWASP Risk Assessment
  ☆163Updated 4 years ago
• Stratus-Security / Subdominator
  The Internets #1 Subdomain Takeover Tool
  ☆297Updated 8 months ago
• OWASP / raider
  OWASP Raider: a novel framework for manipulating the HTTP processes of persistent sessions
  ☆102Updated 2 years ago
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆138Updated 2 weeks ago
• controlplaneio / truffleproc
  truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)
  ☆122Updated 2 years ago
• jhaddix / awsScrape
  A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.
  ☆239Updated 2 years ago
• trufflesecurity / how-to-rotate
  An open-source collection of API key rotation tutorials.
  ☆76Updated 5 months ago
• purpleteam-labs / purpleteam
  CLI component of OWASP PurpleTeam
  ☆134Updated 2 years ago
• newrelic / rusty-hog
  A suite of secret scanners built in Rust for performance. Based on TruffleHog (https://github.com/dxa4481/truffleHog) which is written in…
  ☆541Updated 7 months ago
• feeltheajf / trufflehog3
  Find secrets in your codebase
  ☆125Updated 11 months ago
• firefart / hijagger
  Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration
  ☆304Updated 2 weeks ago
• The-Login / DNS-Analysis-Server
  Tools to assess DNS security.
  ☆153Updated last year
• assetnote / ghostbuster
  Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.
  ☆278Updated last year
• Santandersecurityresearch / DrHeader
  drHEADer helps with the audit of security headers received in response to a single request or a list of requests.
  ☆112Updated last year
• OWASP / www-project-developer-guide
  OWASP Project Developer Guide - Document and Project Web pages
  ☆115Updated last week
• OWASP / www-project-code-review-guide
  OWASP Code Review Guide Web Repository
  ☆148Updated 3 years ago