Alternatives and similar repositories for poc-graphql

Users that are interested in poc-graphql are comparing it to the libraries listed below

• assetnote / batchql
  GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations
  ☆402Updated 3 years ago
• lc / secretz
  secretz, minimizing the large attack surface of Travis CI
  ☆325Updated 3 years ago
• teknogeek / ssrf-sheriff
  A simple SSRF-testing sheriff written in Go
  ☆334Updated last year
• mazen160 / jwt-pwn
  Security Testing Scripts for JWT
  ☆325Updated 3 years ago
• daeken / httprebind
  Automatic tool for DNS rebinding-based SSRF attacks
  ☆303Updated 5 years ago
• fcavallarin / domdig
  DOM XSS scanner for Single Page Applications
  ☆420Updated last month
• BishopFox / json-interop-vuln-labs
  Companion labs to "An Exploration of JSON Interoperability Vulnerabilities"
  ☆211Updated 2 years ago
• szski / shapeshifter
  GraphQL security testing tool
  ☆126Updated 3 years ago
• andresriancho / mongo-objectid-predict
  Predict Mongo ObjectIds
  ☆150Updated 7 years ago
• daeken / SSRFTest
  SSRF testing tool
  ☆244Updated 3 years ago
• ameenmaali / qsfuzz
  qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.
  ☆302Updated 2 years ago
• Regala / burp-scope-monitor
  Burp Suite Extension to monitor new scope
  ☆200Updated 4 years ago
• doyensec / burpdeveltraining
  Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"
  ☆359Updated 5 years ago
• softwaresecured / secure-code-review-checklist
  A starter secure code review checklist
  ☆184Updated 7 years ago
• RhinoSecurityLabs / Swagger-EZ
  A tool geared towards pentesting APIs using OpenAPI definitions.
  ☆183Updated 3 years ago
• cablej / FileChangeMonitor
  Continuous monitoring for JavaScript files
  ☆225Updated 6 years ago
• jobertabma / transformations
  ☆173Updated 2 years ago
• wisec / domxsswiki
  Automatically exported from code.google.com/p/domxsswiki
  ☆547Updated 7 years ago
• mazen160 / xless
  The Serverless Blind XSS App
  ☆339Updated 7 months ago
• makuga01 / dnsFookup
  DNS rebinding toolkit
  ☆254Updated 2 years ago
• Static-Flow / gofingerprint
  GoFingerprint is a Go tool for taking a list of target web servers and matching their HTTP responses against a user defined list of fing…
  ☆206Updated 2 years ago
• TyrantSec / Fuzzing
  Fuzzing Payloads to Assist in Web Application Testing.
  ☆167Updated 6 years ago
• ngalongc / openapi_security_scanner
  ☆172Updated 4 years ago
• BuildHackSecure / gitscraper
  A tool which scrapes public github repositories for common naming conventions in variables, folders and files
  ☆293Updated last year
• defparam / h1passets
  List HackerOne private program assets
  ☆154Updated 4 years ago
• ArturSS7 / TukTuk
  Tool for catching and logging different types of requests.
  ☆221Updated 5 years ago
• devoteam-cybertrust / burpcollaborator-docker
  This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard cer…
  ☆290Updated 11 months ago
• bayotop / off-by-slash
  Burp extension to detect alias traversal via NGINX misconfiguration at scale.
  ☆264Updated 4 years ago
• NotSoSecure / cloud-service-enum
  ☆260Updated last year
• JuxhinDB / OOB-Server
  A Bind9 server for pentesters to use for Out-of-Band vulnerabilities
  ☆194Updated 6 years ago