Alternatives and similar repositories for attack-surface-detector-cli

Users that are interested in attack-surface-detector-cli are comparing it to the libraries listed below

• RhinoSecurityLabs / Swagger-EZ
  A tool geared towards pentesting APIs using OpenAPI definitions.
  ☆183Updated 3 years ago
• wallarm / jwt-heartbreaker
  The Burp extension to check JWT (JSON Web Tokens) for using keys from known from public sources
  ☆136Updated 5 years ago
• NotSoSecure / cloud-service-enum
  ☆260Updated last year
• aress31 / openapi-parser
  Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in …
  ☆206Updated 2 years ago
• secdec / attack-surface-detector-burp
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆110Updated 2 years ago
• DevSlop / Pixi
  The Pixi module is a MEAN Stack web app with wildly insecure APIs!
  ☆132Updated 3 years ago
• szski / shapeshifter
  GraphQL security testing tool
  ☆126Updated 3 years ago
• rinetd / BurpSuite-1
  BurpSuite using the document and some extensions
  ☆72Updated 5 years ago
• appsecco / dvja
  Damn Vulnerable Java (EE) Application
  ☆144Updated last year
• Static-Flow / BurpSuite-Team-Extension
  This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes …
  ☆261Updated 3 years ago
• PortSwigger / auth-matrix
  AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
  ☆44Updated 2 years ago
• putsi / privatecollaborator
  A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate
  ☆210Updated last year
• yogisec / VulnerableSAMLApp
  Vulnerable SAML infrastructure training applicaiton
  ☆54Updated 2 years ago
• jorritfolmer / vulnerable-api
  Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops
  ☆44Updated last year
• PortSwigger / stepper
  A natural evolution of Burp Suite's Repeater tool
  ☆94Updated 2 years ago
• GoSecure / xxe-workshop
  Workshop given at Hack in Paris 2019
  ☆126Updated 2 years ago
• silentsignal / burp-piper
  Piper Burp Suite Extender plugin
  ☆127Updated last week
• nccgroup / CollaboratorPlusPlus
  ☆148Updated 3 years ago
• detectify / cs-challenge
  Detectify Crowdsource Challenge
  ☆72Updated 3 years ago
• VDA-Labs / websocket-harness
  Use normal web pentest tools to hack Websockets
  ☆18Updated 6 years ago
• bcoles / jira_scan
  A simple remote scanner for Atlassian Jira
  ☆121Updated 2 years ago
• m6a-UdS / dvca
  Damn Vulnerable Cloud Application
  ☆206Updated 7 years ago
• lanmaster53 / pyscripter-er
  A framework built on top of Burp's Python Scripter extension.
  ☆90Updated 2 years ago
• 0xbharath / slurp
  A blazing fast & feature rich Amazon S3 bucket enumerator.
  ☆98Updated 3 years ago
• The-Login / DNS-Reset-Checker
  Tools to assess the DNS security of web applications
  ☆128Updated 3 years ago
• BuffaloWill / burpsuite-project-file-parser
  A Burp Suite Extension for parsing Project Files from the CLI.
  ☆87Updated 2 weeks ago
• jbarone / xxelab
  A simple web app with a XXE vulnerability.
  ☆229Updated 4 years ago
• cyberblackhole / TokenBreaker
  JSON RSA to HMAC and None Algorithm Vulnerability POC
  ☆63Updated 5 years ago
• mattvaldes / vulnerable-api
  This repository contains an example Python API that is vulnerable to several different web API attacks.
  ☆70Updated last year
• horshark / akb-explorer
  A command line tool to search AttackerKB.
  ☆53Updated 5 years ago