Alternatives and similar repositories for owasp-mstg

Users that are interested in owasp-mstg are comparing it to the libraries listed below

• yasinS / bug-bounty-reference
  Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature
  ☆37Updated 7 years ago
• AdmiralGaust / bountyRecon
  Bash script to automate Bug Bounty Reconnaissance
  ☆38Updated 4 years ago
• SaadAhmedx / Subdomain-Takeover
  ☆59Updated 2 years ago
• jhaddix / megplus
  Automated reconnaissance wrapper — TomNomNom's meg on steroids.
  ☆31Updated 6 years ago
• jhaddix / can-i-take-over-xyz
  "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
  ☆39Updated 6 years ago
• codingo / bug-bounty-dorks
  List of Google Dorks for sites that have responsible disclosure program / bug bounty program
  ☆21Updated 5 years ago
• darkc0d37 / wordlistsbyNahamsec
  ☆36Updated 5 years ago
• random-robbie / bugbountydork
  Bug Bounty Dork
  ☆71Updated 3 years ago
• 1ndianl33t / BugBounty_Profile
  Recon_profile
  ☆37Updated 5 years ago
• Cleveridge / cleveridge-subdomain-scanner
  The Cleveridge Subdomain Scanner finds subdomains of a given domain.
  ☆37Updated 5 years ago
• rahulunair / vulnerable-api
  This repository contains an example Python API that is vulnerable to several different web API attacks.
  ☆27Updated 6 years ago
• jhaddix / LazyFuzzer
  Ease-of-use extension for Web Application penetration testing
  ☆22Updated 7 years ago
• gwen001 / BBvuln
  A listing of the most common vuln that you can link in your PoCs
  ☆28Updated 6 years ago
• jhaddix / lazyrecon
  This script is intended to automate your reconnaissance process in an organized fashion
  ☆40Updated 7 years ago
• shauryasharma-05 / The-Bounty-Dorks
  Now use your favorite Google Dorks techniques to find vulnerabilities and earn Bounties.
  ☆31Updated 4 years ago
• ethicalhackingplayground / Bug-Bounty-Tools
  The tools I have programmed to help me with bugbounty's
  ☆115Updated 5 years ago
• random-robbie / wheres-my-git
  Wheres My Git - Find /.git/config files based on dirs found in home url
  ☆20Updated 3 years ago
• jhaddix / sslScrape
  SSLScrape | A scanning tool for scaping hostnames from SSL certificates.
  ☆44Updated 6 years ago
• jhaddix / LinkFinder
  A python script that finds endpoints in JavaScript files
  ☆43Updated 5 years ago
• BugBountyResources / Resources
  A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms ti…
  ☆90Updated 3 years ago
• DFC302 / BugBountyTemplate
  A simple Cherry Tree template that can be used to organize bug bounties
  ☆37Updated 5 years ago
• chennylmf / OWASP-Web-App-Pentesting-checklists
  ☆71Updated 4 years ago
• appsecco / practical-recon-levelup0x02
  This repository contains all the material from the talk "Practical recon techniques for bug hunters & pentesters" given at Bugcrowd Level…
  ☆60Updated 6 years ago
• offhourscoding / recon
  Bug Bounty Recon Script
  ☆18Updated 4 years ago
• nahamsec / SundayStreams
  Data from my Sunday streams
  ☆75Updated 5 years ago
• incogbyte / jsearch
  ☆30Updated 4 years ago
• bonino97 / LemonBooster-v2
  Reestructured LemonBooster.
  ☆47Updated 9 months ago
• Quitten / XSSor
  XSSor is a semi-automatic reflected and persistent XSS detector extension for Burp Suite. The tool was written in Python by Barak Tawily,…
  ☆56Updated 4 years ago
• enciphers-team / WebHacking-Training-Resources
  This repo hosts multiple codes, content, checklists etc which can help a penetration tester in a web application auditing.
  ☆21Updated last year
• vavkamil / bugbountytip.com
  Flask powered website to display tweets with a hashtag #bugbountytip
  ☆16Updated 5 years ago