Alternatives and similar repositories for attack-surface-detector-cli

Users that are interested in attack-surface-detector-cli are comparing it to the libraries listed below

• aress31 / openapi-parser
  Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in …
  ☆205Updated last year
• wallarm / jwt-heartbreaker
  The Burp extension to check JWT (JSON Web Tokens) for using keys from known from public sources
  ☆137Updated 5 years ago
• RhinoSecurityLabs / Swagger-EZ
  A tool geared towards pentesting APIs using OpenAPI definitions.
  ☆182Updated 3 years ago
• rinetd / BurpSuite-1
  BurpSuite using the document and some extensions
  ☆71Updated 5 years ago
• szski / shapeshifter
  GraphQL security testing tool
  ☆126Updated 3 years ago
• putsi / privatecollaborator
  A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate
  ☆212Updated last year
• Static-Flow / BurpSuite-Team-Extension
  This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes …
  ☆262Updated 3 years ago
• NotSoSecure / cloud-service-enum
  ☆259Updated last year
• yogisec / VulnerableSAMLApp
  Vulnerable SAML infrastructure training applicaiton
  ☆54Updated 2 years ago
• The-Login / DNS-Reset-Checker
  Tools to assess the DNS security of web applications
  ☆128Updated 3 years ago
• BuffaloWill / burpsuite-project-file-parser
  A Burp Suite Extension for parsing Project Files from the CLI.
  ☆87Updated last year
• secdec / attack-surface-detector-burp
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆106Updated last year
• dariusztytko / vhosts-sieve
  Searching for virtual hosts among non-resolvable domains
  ☆88Updated 5 years ago
• DevSlop / Pixi
  The Pixi module is a MEAN Stack web app with wildly insecure APIs!
  ☆134Updated 2 years ago
• tristanlatr / burpa
  Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used t…
  ☆289Updated 2 months ago
• GoSecure / xxe-workshop
  Workshop given at Hack in Paris 2019
  ☆125Updated 2 years ago
• m6a-UdS / dvca
  Damn Vulnerable Cloud Application
  ☆199Updated 7 years ago
• 0xbharath / slurp
  A blazing fast & feature rich Amazon S3 bucket enumerator.
  ☆99Updated 3 years ago
• lanmaster53 / pyscripter-er
  A framework built on top of Burp's Python Scripter extension.
  ☆90Updated last year
• PortSwigger / stepper
  A natural evolution of Burp Suite's Repeater tool
  ☆93Updated 2 years ago
• mattvaldes / vulnerable-api
  This repository contains an example Python API that is vulnerable to several different web API attacks.
  ☆70Updated last year
• nccgroup / CollaboratorPlusPlus
  ☆148Updated 3 years ago
• detectify / ugly-duckling
  Ugly Duckling is a lightweight scanner built specifically for our Crowdsource community to submit proof-of-concept modules
  ☆188Updated 4 years ago
• BBhacKing / jwt_secrets
  A list of "secrets" from JWT sample code and readme files.
  ☆57Updated 5 years ago
• ptswarm / ptswarm-twitter
  ☆76Updated 4 years ago
• silentsignal / burp-piper
  Piper Burp Suite Extender plugin
  ☆126Updated last year
• cyberblackhole / TokenBreaker
  JSON RSA to HMAC and None Algorithm Vulnerability POC
  ☆64Updated 5 years ago
• jorritfolmer / vulnerable-api
  Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops
  ☆44Updated last year
• bcoles / jira_scan
  A simple remote scanner for Atlassian Jira
  ☆121Updated 2 years ago
• orlyjamie / asnrecon
  ASN reconnaissance script
  ☆133Updated last year