The Web Security Testing Guide is a comprehensive open source guide to testing the security of web applications and web services.
☆32Oct 27, 2025Updated last year
Alternatives and similar repositories for wstg
Users that are interested in wstg are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- GraphQL automatic fuzzing tool☆15Jul 16, 2021Updated 5 years ago
- Python Duo Push API☆41Jul 21, 2026Updated 3 months ago
- ☆17Nov 18, 2022Updated 3 years ago
- Expand urls into one url for each path depth☆31Jul 29, 2020Updated 6 years ago
- ☆24Jan 26, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- It is a script written in Python that performs brute force on workers' payroll files through the use of their DNI (National Identity Docu…☆13Oct 6, 2020Updated 6 years ago
- A BurpSuite plugin for BBRF☆27Nov 17, 2024Updated last year
- A demo PHP application used to exercise SQL injection techniques in a safe, local Docker environment☆45Jun 3, 2024Updated 2 years ago
- 3klector is an automation Recon tool which collecting information about Acquisitions and ASN which related to Big Scope company☆46Sep 19, 2022Updated 4 years ago
- Built on a lazy Sunday after seeing this tweet (https://twitter.com/intigriti/status/1272145863868104705?s=20) I present to you, Paramete…☆51Jun 14, 2020Updated 6 years ago
- Some contributions in the nuclei-templates repository☆63Updated this week
- Hackthebox tools☆13Mar 3, 2019Updated 7 years ago
- Download content of an open bucket☆16Dec 28, 2019Updated 6 years ago
- ☆17May 7, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Recon-Ninja☆89Mar 24, 2024Updated 2 years ago
- Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki☆215Oct 31, 2024Updated 2 years ago
- Instant access to you bug bounty submission dashboard on various platforms + publicly disclosed reports + #bugbountytip☆27May 26, 2020Updated 6 years ago
- Dotmil subdomain discovery tool that scrapes domains from official DoD website directories and certificate transparency logs☆98Jan 21, 2021Updated 5 years ago
- OWASP ZAP add-on to detect reflected parameter vulnerabilities efficiently☆13Feb 19, 2021Updated 5 years ago
- ☆62Sep 19, 2026Updated last month
- H&E- Burp Highlighter and Extractor☆18Mar 29, 2023Updated 3 years ago
- Bug bounty API dashboard aggregating data from HackerOne, Bugcrowd and other platforms☆42Aug 13, 2023Updated 3 years ago
- Automatic SQL injection and database takeover tool☆45Nov 27, 2025Updated 11 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Collection of some pentesting and bugbounty resources☆50Feb 5, 2022Updated 4 years ago
- ☆13Feb 14, 2022Updated 4 years ago
- De-clutter a list of URLs☆390Mar 8, 2026Updated 7 months ago
- A lightweight version of my bug bounty hunting framework designed to be run on Synack's LP+ machines.☆11Jul 11, 2023Updated 3 years ago
- Discovery Header Bug Bounty to DoD☆48Aug 20, 2021Updated 5 years ago
- A simple script that edits the XML of a macro-enabled Word document (.docm or Word 97 document) to add a reference to a remote stylesheet…☆11Oct 5, 2022Updated 4 years ago
- The Proxy Auto Configuration (PAC) file dynamic generator which allows you to specify the proxying rules and the PAC-file will be generat…☆10Dec 5, 2019Updated 6 years ago
- ☆12Jul 13, 2022Updated 4 years ago
- Buggyapp is an vulnerable android application. This app can be used by pentesters, security researchers to practice Android application p…☆13Jun 4, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- HTTP request smuggling tools☆17Aug 17, 2020Updated 6 years ago
- All known and unknown public POC's for wordpress themes and plugins☆79Jun 23, 2021Updated 5 years ago
- Interview questions to screen offensive (red team/pentest) candidates☆12Apr 7, 2017Updated 9 years ago
- ☆45Apr 30, 2021Updated 5 years ago
- Cheat-Sheet of tools for penetration testing☆54May 23, 2023Updated 3 years ago
- Convert asciinema JSON files to GIF for embedding in Github, Medium, email, Slack and more!☆10Sep 24, 2020Updated 6 years ago
- Tools to assess the DNS security of web applications☆127Oct 5, 2022Updated 4 years ago