Alternatives and similar repositories for web_security_testing

Users that are interested in web_security_testing are comparing it to the libraries listed below

• PortSwigger / burp-smart-buster
  A Burp Suite content discovery plugin that add the smart into the Buster!
  ☆32Updated 7 years ago
• thegsoinfosec / web-app
  Tools and resources for web app hacking. The payloads.txt documents are a must have for your Burpsuite intruder payload armory. They've h…
  ☆28Updated 6 years ago
• si9int / gDork
  A Mozilla Firefox extension which allows quick access to your google-dorking result
  ☆19Updated 5 years ago
• TROUBLE-1 / codeza
  This tool will scan all the URL's in the file and will provide Content-Length, Status-Code, Server and more.
  ☆36Updated 3 years ago
• appsecco / VyAPI
  VyAPI - A cloud based vulnerable hybrid Android App
  ☆86Updated 5 years ago
• EdOverflow / curate
  A tool for fetching archived URLs (to be rewritten in Go).
  ☆41Updated 7 years ago
• profmoriarity / wfuxx
  web-based-fuzzer
  ☆32Updated 5 years ago
• Static-Flow / DirectoryImporter
  This is a Burpsuite plugin built to enable you to import your directory bruteforcing results into burp for easy viewing later. This is an…
  ☆36Updated 2 years ago
• nccgroup / clickjacking-poc
  Clickjacking PoC Generator
  ☆35Updated 5 years ago
• ticarpi / my-pentesting-repo
  This is a set of tips and reminders for pentesting processes and scripts/programs. Initially for personal use, but if anyone else finds t…
  ☆52Updated 5 years ago
• ni8walk3r / JWT-Exploitation
  Collection of different exploitation scenarios of JWT.
  ☆21Updated 4 years ago
• dsopas / h1-search
  Tool that will request the public disclosures on a specific HackerOne program and show them in a localhost webserver.
  ☆63Updated 6 years ago
• mhaskar / Blinder
  A python library to automate time-based blind SQL injection
  ☆49Updated 6 years ago
• ettic-team / EndpointFinder-Burp
  ☆32Updated 6 years ago
• anantshri / html5_attack_and_secure
  HTML5 Training material for Attack and Secure training sessions.
  ☆43Updated 2 years ago
• vavkamil / BBClip
  Bug Bounty Clipboard
  ☆17Updated 6 years ago
• jimmy-ly00 / dirlister
  Create wordlists from source codes files/directories for enumeration
  ☆30Updated 2 years ago
• hackerscrolls / simplesmtp
  Just a simple SMTP server, implementation of @corpix smtpd library
  ☆15Updated 5 years ago
• crawl3r / PortswiggerXSS
  gathers the XSS cheatsheet payloads and creates a usable wordlist
  ☆74Updated 4 years ago
• codewatchorg / Burp-AnonymousCloud
  Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible vulnerabilities
  ☆46Updated 2 years ago
• aungthurhahein / Red-Team-Curation-List
  A list to discover work of red team tooling and methodology for penetration testing and security assessment
  ☆77Updated 6 years ago
• ibr2 / Go-For-OSCP
  ☆18Updated 8 years ago
• M507 / AutomatedHunter
  Google Chrome Extension automates testing fundamental Web Problems via Chrome
  ☆20Updated 4 years ago
• secxena / credcheck
  Credentials Checking Framework
  ☆53Updated 2 years ago
• Abss0x7tbh / massNS
  A tool that turns the authoritative nameservers of DNS providers to resolvers and resolves the target domain list. Please think of this a…
  ☆25Updated 6 years ago
• random-robbie / kube-scan
  Kubernetes Scanner
  ☆40Updated 3 years ago
• sd-geek / OSCP
  ☆19Updated 6 years ago
• eur0pa / goGetBucket
  A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.
  ☆26Updated 7 years ago
• B3nac / bXSSRequest
  Literally spray blind xss payloads everywhere.
  ☆26Updated 3 years ago
• antichown / vpn-ssl-pulse
  Pulse SSL VPN Arbitrary File Read burp extension
  ☆24Updated 6 years ago