Alternatives and similar repositories for Web-Application-Pentest-Checklist

Users that are interested in Web-Application-Pentest-Checklist are comparing it to the libraries listed below

• iamthefrogy / bucketbunny
  AWS S3 open bucket poc automated script.
  ☆57Updated 4 years ago
• VitthalS / ivna
  Intentionally Vulnerable Nodejs Application & APIs
  ☆21Updated 3 years ago
• drak3hft7 / OSCP-Exam-Report-Template
  Template used for my OSCP exam.
  ☆29Updated 3 years ago
• v1ll41n / H1-Report-Finder
  A burpsuite extension that helps security researchers find public security reports published on h1 based on the selected host
  ☆42Updated 5 years ago
• 0xb1tByte / eWPTXv1-Journey
  This repository is intended for sharing files/tools/tutorials..etc that related to eWPTXv1 from eLearnSecurity
  ☆23Updated 5 years ago
• Ravaan21 / Chandrahasa
  A solid recon tool I use personally.
  ☆30Updated 2 years ago
• h4ckboy19 / XXE_A_TO_Z
  ☆44Updated 4 years ago
• c0brabaghdad1 / DVPA
  Damn Vulnerable PHP Application (DVPA) - It is Lab Written in The PHP lang, Which Contains PHP Type Juggling - RCE Challenges
  ☆33Updated 3 years ago
• sahad-mk / Exploits
  Exploit scripts
  ☆12Updated 3 years ago
• MantisSTS / GoCloud
  Checks whether a domain is hosted on a cloud service such as AWS, Azure or CloudFlare
  ☆59Updated 2 years ago
• vikrantbatra05 / HuntTheBug
  Basic Recon For Bug Bounty Hunter - "HuntTheBug" is Basic Scripts For Sub Domain Enumeration> Live Domain Enumeration > Sub Domain Hijack…
  ☆54Updated 3 years ago
• Dheerajmadhukar / karma_v1
  KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…
  ☆59Updated 4 years ago
• TROUBLE-1 / White-box-pentesting
  This lab is created to demonstrate pass-the-hash, blind sql and SSTI vulnerabilities
  ☆92Updated 2 years ago
• shabarkin / CodeAllTheThings
  A list of threat sinks used in the manual security source code review for application security
  ☆73Updated 2 years ago
• MistSpark / DNS-Wordlists
  part of my wordlist to bruteforce DNS to find subdoamains.
  ☆61Updated 4 years ago
• m0chan / pwk-cheatsheet
  ☆51Updated 8 years ago
• akincibor / 403-bypass
  Enhanced 403 bypass header
  ☆21Updated 3 years ago
• MustafaSky / Guide-to-SSRF
  Guide to SSRF
  ☆73Updated 2 years ago
• kleiton0x00 / CRLF-one-liner
  A simple Bash one liner with aim to automate CRLF vulnerability scanning.
  ☆69Updated 5 years ago
• bot8080 / awesomeBugbounty
  ☆49Updated 5 years ago
• 0xb1tByte / eWPTXv2-Journey
  This repository is intended for sharing files/tools/tutorials..etc that related to eWPTXv2 from eLearnSecurity
  ☆14Updated 5 years ago
• EasyRecon / wappaGo
  ☆58Updated last year
• redhuntlabs / Log4JHunt
  An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.
  ☆45Updated 11 months ago
• fuzz-security / Active-Directory-Exploitation-Cheat-Sheet
  A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
  ☆50Updated 5 years ago
• hakluke / hakfindinternaldomains
  Feed it a list of subdomains, it will resolve them and tell you which ones are internal
  ☆93Updated 4 years ago
• RakeshKengale / RaKKeN
  Information Security Information From Web
  ☆28Updated 4 months ago
• MShahine / Bug-Bounty-Recon
  All The Notes And Tips I FOund In Github And Twitter I Put Them Here
  ☆35Updated 5 years ago
• J1NNX26 / resources
  A curated list of different pentesting resources
  ☆30Updated 3 years ago
• MayankPandey01 / GetTweets
  An Automation Tool Written in Python which uses Twitter and GitHub API
  ☆15Updated 3 years ago
• OdinF13 / Bug-Bounty-Scripts
  Script for Bug Bounty
  ☆29Updated 4 years ago