Alternatives and similar repositories for shcheck:

Users that are interested in shcheck are comparing it to the libraries listed below

• koenbuyens / securityheaders
  Check any website (or set of websites) for insecure security headers.
  ☆244Updated last year
• michelin / ChopChop
  ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.
  ☆682Updated last year
• m8sec / subscraper
  Subdomain and target enumeration tool built for offensive security testing
  ☆844Updated 7 months ago
• imperva / automatic-api-attack-tool
  Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an outp…
  ☆464Updated last year
• kac89 / vulnrepo
  VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, i…
  ☆454Updated this week
• 0xInfection / XSRFProbe
  The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
  ☆1,167Updated this week
• initstring / cloud_enum
  Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
  ☆1,733Updated 3 months ago
• sa7mon / S3Scanner
  Scan for misconfigured S3 buckets across S3-compatible APIs!
  ☆2,650Updated this week
• wapiti-scanner / wapiti
  Web vulnerability scanner written in Python3
  ☆1,287Updated last month
• 0xInfection / LogMePwn
  A fully automated, reliable, super-fast, mass scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.
  ☆394Updated last month
• wireghoul / dotdotpwn
  DotDotPwn - The Directory Traversal Fuzzer
  ☆1,009Updated 2 years ago
• ztgrace / changeme
  A default credential scanner.
  ☆1,460Updated 3 years ago
• haccer / subjack
  Subdomain Takeover tool written in Go
  ☆1,931Updated last year
• projectdiscovery / shuffledns
  MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering…
  ☆1,360Updated this week
• vysecurity / DomLink
  A tool to link a domain with registered organisation names and emails, to other domains.
  ☆833Updated 8 months ago
• PentestPad / subzy
  Subdomain takeover vulnerability checker
  ☆1,125Updated 4 months ago
• 0xsha / CloudBrute
  Awesome cloud enumerator
  ☆945Updated 5 months ago
• PortSwigger / autowasp
  BurpSuite Extension: A one-stop pen testing checklist and logger tool
  ☆265Updated last year
• erev0s / VAmPI
  Vulnerable REST API with OWASP top 10 vulnerabilities for security testing
  ☆950Updated 2 months ago
• dolevf / graphql-cop
  Security Auditor Utility for GraphQL APIs
  ☆409Updated this week
• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆575Updated 2 months ago
• elkokc / reflector
  Burp plugin able to find reflected XSS on page in real-time while browsing on site
  ☆1,140Updated 3 years ago
• defparam / smuggler
  Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3
  ☆1,880Updated last year
• chrislockard / api_wordlist
  A wordlist of API names for web application assessments
  ☆777Updated 2 years ago
• RedTeamPentesting / monsoon
  Fast HTTP enumerator
  ☆463Updated last month
• R0X4R / Garud
  An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and…
  ☆782Updated last year
• ksharinarayanan / SSRFire
  An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects
  ☆953Updated 3 years ago
• reconmap / reconmap
  Vulnerability assessment and penetration testing automation and reporting platform for teams.
  ☆440Updated last month
• xm1k3 / cent
  Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…
  ☆938Updated last week
• honze-net / nmap-bootstrap-xsl
  A Nmap XSL implementation with Bootstrap.
  ☆937Updated last year