Alternatives and similar repositories for wstg

Users that are interested in wstg are comparing it to the libraries listed below

• th3hack3rwiz / Wordlist-Weaver
  The project aims at creating target-specific wordlists for any web application that you are testing.
  ☆66Updated 3 years ago
• michael1026 / trashcompactor
  ☆67Updated 2 years ago
• ozguralp / synackapi
  ☆61Updated last year
• MilindPurswani / whoxyrm
  A reverse whois tool based on Whoxy API.
  ☆166Updated last year
• allyomalley / BurpParamFlagger
  A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…
  ☆132Updated 4 years ago
• daehee / mildew
  Dotmil subdomain discovery tool that scrapes domains from official DoD website directories and certificate transparency logs
  ☆96Updated 4 years ago
• 0xbharath / slurp
  A blazing fast & feature rich Amazon S3 bucket enumerator.
  ☆98Updated 2 years ago
• yogisec / VulnerableSAMLApp
  Vulnerable SAML infrastructure training applicaiton
  ☆53Updated 2 years ago
• putsi / privatecollaborator
  A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate
  ☆210Updated last year
• BonJarber / fresh-resolvers
  List of fresh DNS resolvers updated daily
  ☆108Updated 2 years ago
• codingo / microsubs
  A collection of code for interacting with API sources directly to improve your understanding of those services.
  ☆65Updated 4 years ago
• honoki / bbrf-dashboard
  ☆40Updated 3 weeks ago
• incogbyte / quickpress
  Small tool to automate SSRF wordpress and XMLRPC finder
  ☆81Updated 2 years ago
• InsiderPhD / Arjun
  HTTP parameter discovery suite.
  ☆63Updated 5 years ago
• gwen001 / dnspy
  Find subdomains and takeovers.
  ☆85Updated 2 years ago
• 0xDexter0us / uproot-JS
  Extract JavaScript files from burp suite project with ease.
  ☆91Updated 3 years ago
• KathanP19 / protoscan
  Prototype Pollution Scanner
  ☆125Updated 4 years ago
• yeswehack / xsstools
  xss development frameworks, with the goal of making payload writing easier.
  ☆146Updated 11 months ago
• ghostlulzhacks / s3brute
  s3 brute force tool
  ☆45Updated 4 years ago
• bamhm182 / SynackAPI
  A Python Library designed to facilitate interaction with Synack's undocumented API endpoints
  ☆26Updated 5 months ago
• dinosn / synack_burp
  ☆19Updated 2 years ago
• pry0cc / tew
  A quick ‘n dirty nmap parser written in Golang to convert nmap xml to IP:Port notation.
  ☆128Updated last year
• obheda12 / MoneyScope
  A Simple Tool to Pull Paid Bounty Scopes for Wide Recon Actvities
  ☆105Updated 4 years ago
• detectify / cs-challenge
  Detectify Crowdsource Challenge
  ☆69Updated 3 years ago
• Zarcolio / wwwordlist
  Wwwordlist is a wordlist generator for pentesters and bug bounty hunters. It extracts words from HTML, URLs, JS/HTTP/input variables, quo…
  ☆104Updated last year
• ignis-sec / puff
  Clientside vulnerability / reflected xss fuzzer
  ☆150Updated 2 years ago
• iamthefrogy / bucketbunny
  AWS S3 open bucket poc automated script.
  ☆57Updated 3 years ago
• KingOfBugbounty / KingRecon_DOD
  ☆76Updated last year
• devpwn / xmlrpc-scan
  golang tool to scan domains or single domains with know security issues against xmlrpc
  ☆62Updated last year
• six2dez / degoogle_hunter
  Simple fork from degoogle original project with bug hunting purposes
  ☆89Updated 3 years ago