Alternatives and similar repositories for Web-App-Hacking-Notes:

Users that are interested in Web-App-Hacking-Notes are comparing it to the libraries listed below

• appsecco / practical-recon-levelup0x02
  This repository contains all the material from the talk "Practical recon techniques for bug hunters & pentesters" given at Bugcrowd Level…
  ☆60Updated 6 years ago
• Team-Firebugs / Burp-LFI-tests
  Fuzzing for LFI using Burpsuite
  ☆61Updated 8 years ago
• melvinsh / subresolve
  Resolve and quickly portscan a list of (sub)domains.
  ☆86Updated 8 years ago
• dreadlocked / SSRFmap
  Simple Server Side Request Forgery services enumeration tool.
  ☆54Updated 6 years ago
• laconicwolf / burp-extensions
  A collection of scripts to extend Burp Suite
  ☆139Updated 5 years ago
• hexrom / PenetrationTesting-Playbook
  Penetration Testing Notes and Playbook (PTP)
  ☆175Updated 6 years ago
• upgoingstar / hackerone_public_reports
  Finds all public bug reports on reported on Hackerone
  ☆93Updated 9 years ago
• pentesteracademy / vulnoscollection
  Vulnerable OS Collection is a collection of four Ubuntu based OSes containing real world vulnerable web applications.
  ☆58Updated 7 years ago
• executeatwill / OSCP-Treasure-Cave
  Collection of OSCP study material && tools.
  ☆78Updated 5 years ago
• emadshanab / facebook-bug-bounty-writeups
  Facebook Bug Bounties
  ☆102Updated 3 years ago
• securityidiots / CollabOzark
  CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE, External Resource Access payloads triggers.
  ☆138Updated 5 years ago
• JordyZomer / autoSubTakeover
  A tool used to check if a CNAME resolves to the scope address. If the CNAME resolves to a non-scope address it might be worth checking ou…
  ☆135Updated last year
• mystech7 / Burp-Hunter
  XSS Hunter Burp Plugin
  ☆149Updated 6 years ago
• agrawalsmart7 / autoRecon
  This tool is for automate the initial things that we usually do in daily pentesting. So you can focus more on the main target.
  ☆78Updated 5 years ago
• ibr2 / Go-For-OSCP
  ☆18Updated 7 years ago
• Vanshal / Pentesting-Cheatsheet
  ☆46Updated 5 years ago
• r00tgate / bugbounty101
  An entry level resource to learning bug bounty.
  ☆25Updated 6 years ago
• redhuntlabs / BurpSuite-Asset_Discover
  Burp Suite extension to discover assets from HTTP response.
  ☆221Updated last month
• BugBountyResources / Resources
  A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms ti…
  ☆89Updated 3 years ago
• BitTheByte / Domainker
  BugBounty Tool
  ☆39Updated 5 years ago
• 7ioSecurity / XSS-Payloads
  XSS Payloads
  ☆49Updated 9 years ago
• cujanovic / Content-Bruteforcing-Wordlist
  Wordlist for content(directory) bruteforce discovering with Burp or dirsearch
  ☆212Updated 4 months ago
• SecFathy / Bugzee
  Simple Script to install recommended Bug Bounty Hunting Tools In Your Linux Disto
  ☆47Updated 3 years ago
• davevs / dvxte
  Damn Vulnerable eXtensive Training Environment
  ☆103Updated 2 years ago
• VincentDS / HackerOne-Notifier
  Send notifications if a new program is published on HackerOne using Pushbullet
  ☆26Updated 7 years ago
• j0bin / Pentest-Resources
  ☆120Updated 7 years ago
• b1n4ry4rms / RedTeam-Pentest-Cheatsheets
  Red Teaming :: Penetration Testing :: Offensive Security :: OSCP :: OSCE :: CheatSheets :: Tools :: etc...
  ☆147Updated 6 years ago
• secdec / attack-surface-detector-burp
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆100Updated last year
• bilbomal / BB-Tips
  Collection of Bug Bounty Tips
  ☆64Updated 5 years ago
• 0xdevalias / wordlists
  A place to store my own wordlists, and link to others that are useful
  ☆106Updated last year