The Web Security Testing Guide is a comprehensive open source guide to testing the security of web applications and web services.
☆32Oct 27, 2025Updated 9 months ago
Alternatives and similar repositories for wstg
Users that are interested in wstg are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.☆11Apr 6, 2020Updated 6 years ago
- API for Asset Service☆15Aug 15, 2024Updated last year
- GraphQL automatic fuzzing tool☆16Jul 16, 2021Updated 5 years ago
- Python Duo Push API☆41Jul 21, 2026Updated 2 weeks ago
- ☆17Nov 18, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Nuclei plugin for BurpSuite☆17Nov 29, 2024Updated last year
- ☆24Jan 26, 2021Updated 5 years ago
- Expand urls into one url for each path depth☆31Jul 29, 2020Updated 6 years ago
- Download content of an open bucket☆16Dec 28, 2019Updated 6 years ago
- OWASP ZAP add-on to detect reflected parameter vulnerabilities efficiently☆12Feb 19, 2021Updated 5 years ago
- ☆17May 7, 2021Updated 5 years ago
- A collaborative web exploitation framework.☆36Updated this week
- Instant access to you bug bounty submission dashboard on various platforms + publicly disclosed reports + #bugbountytip☆26May 26, 2020Updated 6 years ago
- ☆62Jul 23, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- H&E- Burp Highlighter and Extractor☆18Mar 29, 2023Updated 3 years ago
- Bug bounty API dashboard aggregating data from HackerOne, Bugcrowd and other platforms☆42Aug 13, 2023Updated 2 years ago
- Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki☆215Oct 31, 2024Updated last year
- Collection of some pentesting and bugbounty resources☆51Feb 5, 2022Updated 4 years ago
- Some contributions in the nuclei-templates repository☆64Aug 3, 2026Updated last week
- Map the catalog (i.e. find /) for z/OS☆11Mar 17, 2026Updated 4 months ago
- Create your Custom Wordlist For Fuzzing☆204Oct 14, 2024Updated last year
- A demo PHP application used to exercise SQL injection techniques in a safe, local Docker environment☆47Jun 3, 2024Updated 2 years ago
- Automatic SQL injection and database takeover tool☆45Nov 27, 2025Updated 8 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Recon-Ninja☆88Mar 24, 2024Updated 2 years ago
- Discovery Header Bug Bounty to DoD☆47Aug 20, 2021Updated 4 years ago
- Burp Suite plugin to copy regex matches from selected requests and/or responses to the clipboard.☆35Feb 12, 2022Updated 4 years ago
- A lightweight version of my bug bounty hunting framework designed to be run on Synack's LP+ machines.☆12Jul 11, 2023Updated 3 years ago
- The Proxy Auto Configuration (PAC) file dynamic generator which allows you to specify the proxying rules and the PAC-file will be generat…☆10Dec 5, 2019Updated 6 years ago
- De-clutter a list of URLs☆391Mar 8, 2026Updated 5 months ago
- Oyedata is a tool to perform OData assessments☆13Aug 3, 2012Updated 14 years ago
- Cheat-Sheet of tools for penetration testing☆53May 23, 2023Updated 3 years ago
- Networking exploration in golang to build a security enhanced version of netcat☆10Feb 20, 2018Updated 8 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Convert asciinema JSON files to GIF for embedding in Github, Medium, email, Slack and more!☆10Sep 24, 2020Updated 5 years ago
- ☆13Feb 14, 2022Updated 4 years ago
- How to ARM Yourself - Bsides Tampa 2020☆14Mar 1, 2020Updated 6 years ago
- HTTP request smuggling tools☆17Aug 17, 2020Updated 5 years ago
- An automation framework for CyberSecurity Tools☆12Dec 6, 2025Updated 8 months ago
- This automation protect against subdomain takeover on AWS env which also send alerts on slack.☆12Aug 1, 2021Updated 5 years ago
- Tools to assess the DNS security of web applications☆129Oct 5, 2022Updated 3 years ago