Alternatives and similar repositories for cis-benchmarks:

Users that are interested in cis-benchmarks are comparing it to the libraries listed below

• gand3lf / semgrepper
  An extension to use Semgrep inside Burp Suite.
  ☆88Updated last year
• NotSoSecure / cloud-sec-wiki
  Jekyll Files for cloudsecwiki.com
  ☆51Updated 3 years ago
• projectdiscovery / network-fingerprint
  A fingerprint generation helper for nuclei network templates
  ☆72Updated 2 years ago
• mhaskar / Bughound
  Static code analysis tool based on Elasticsearch
  ☆129Updated 4 years ago
• thelicato / fire
  Take domains on stdin and output them on stdout if they get resolved
  ☆33Updated 2 years ago
• GovTech-CSG / Autowasp
  BurpSuite Extension: A one-stop pen testing checklist and logger tool
  ☆75Updated 2 years ago
• yozgarcia / el_segmentador
  Tool to automate corporate network segmentation test
  ☆19Updated 4 years ago
• cyware-labs / Threat-Response-Docker
  ☆41Updated 2 years ago
• Ebryx / Nessus_Map
  Parse .nessus file(s) and shows output in interactive UI
  ☆149Updated 10 months ago
• vmware-labs / attack-surface-framework
  Tool to discover external and internal network attack surface
  ☆194Updated 9 months ago
• Lu1sDV / wafme0w
  Fast and lightweight Web Application Firewall Fingerprinting tool
  ☆62Updated 2 months ago
• PortSwigger / nuclei-burp-integration
  Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.
  ☆28Updated last year
• AbstractClass / CloudPrivs
  Determine privileges from cloud credentials via brute-force testing.
  ☆66Updated 6 months ago
• JOSHUAJEBARAJ / GCP-GOAT
  GCP GOAT is the vulnerable application for learn the GCP Security
  ☆63Updated last year
• Sprocket-Security / cvetrends
  cvet is a Python utility for pulling actionable vulnerabilities from cvetrends.com
  ☆39Updated 2 years ago
• expl0itabl3 / Redsheet
  Red Teaming & Active Directory Cheat Sheet.
  ☆39Updated last year
• H4rk3nz0 / Exploits
  A selection of rebuilt and from scratch exploits, scripts and ideas that can be used in red-teaming scenarios.
  ☆6Updated last year
• dsecuredcom / yataf
  yataf extracts secrets and paths from files or urls - its best used against javascript files
  ☆51Updated 5 months ago
• OWASP / www-project-asvs-security-evaluation-templates-with-nuclei
  OWASP ASVS Security Evaluation Templates with Nuclei
  ☆29Updated this week
• nicolasriverocorvalan / cloud-sniper
  Virtual Security Operations Center
  ☆50Updated last year
• justmorpheus / burp-automation
  Performing automated scan using Burp Suite Pro & Vmware Burp Rest API
  ☆49Updated 2 years ago
• thesubtlety / go-decrypt-jenkins
  Simple tool to decrypt Jenkins encrypted strings
  ☆75Updated last year
• optionalCTF / SSOh-No
  User enumeration and password spraying tool for testing Azure AD
  ☆69Updated 2 years ago
• OWASP / wwwgrep
  OWASP Foundation Web Respository
  ☆35Updated 3 years ago
• yeswehack / myopenvdp
  MyOpenVDP is a free web application to install a vulnerability disclosure policy or a vulnerability disclosure program on your assets. (V…
  ☆27Updated 6 months ago
• nightwatchcybersecurity / gitbleed_tools
  ☆90Updated 3 years ago
• Orange-Cyberdefense / CVE-repository
  Repository of CVE found by OCD people
  ☆75Updated 7 months ago
• alt3kx / CVE-2021-21972
  ☆54Updated 3 years ago
• zer1t0 / awsenum
  Enumerate AWS permissions and resources.
  ☆67Updated 2 years ago
• bcoles / jira_scan
  A simple remote scanner for Atlassian Jira
  ☆120Updated 2 years ago