synack / wstgLinks
The Web Security Testing Guide is a comprehensive open source guide to testing the security of web applications and web services.
☆30Updated 2 years ago
Alternatives and similar repositories for wstg
Users that are interested in wstg are comparing it to the libraries listed below
Sorting:
- ☆67Updated 2 years ago
- The project aims at creating target-specific wordlists for any web application that you are testing.☆66Updated 3 years ago
- A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…☆131Updated 4 years ago
- ☆61Updated last year
- A reverse whois tool based on Whoxy API.☆167Updated last year
- Dotmil subdomain discovery tool that scrapes domains from official DoD website directories and certificate transparency logs☆96Updated 4 years ago
- A blazing fast & feature rich Amazon S3 bucket enumerator.☆99Updated 3 years ago
- A quick ‘n dirty nmap parser written in Golang to convert nmap xml to IP:Port notation.☆128Updated last year
- A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate☆212Updated last year
- List of fresh DNS resolvers updated daily☆108Updated 2 years ago
- ☆40Updated 2 months ago
- Small tool to automate SSRF wordpress and XMLRPC finder☆81Updated 2 years ago
- Prototype Pollution Scanner☆126Updated 4 years ago
- A collection of code for interacting with API sources directly to improve your understanding of those services.☆66Updated 4 years ago
- ☆19Updated 2 years ago
- Vulnerable SAML infrastructure training applicaiton☆54Updated 2 years ago
- Detectify Crowdsource Challenge☆70Updated 3 years ago
- s3 brute force tool☆45Updated 4 years ago
- Adds a customizable "Send to..."-context-menu to your BurpSuite.☆163Updated 2 years ago
- ☆76Updated last year
- ASN reconnaissance script☆132Updated last year
- Reestructured LemonBooster.☆47Updated last year
- golang tool to scan domains or single domains with know security issues against xmlrpc☆61Updated last year
- Horizontal Domain Discovery☆76Updated 2 years ago
- AWS S3 open bucket poc automated script.☆57Updated 4 years ago
- HTTP parameter discovery suite.☆63Updated 5 years ago
- A Python Library designed to facilitate interaction with Synack's undocumented API endpoints☆26Updated 7 months ago
- Find subdomains and takeovers.☆86Updated 2 years ago
- A burpsuite extension that helps security researchers find public security reports published on h1 based on the selected host☆42Updated 5 years ago
- Clientside vulnerability / reflected xss fuzzer☆149Updated 2 years ago