Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki
☆213Oct 31, 2024Updated last year
Alternatives and similar repositories for web-methodology
Users that are interested in web-methodology are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆46Sep 10, 2020Updated 5 years ago
- ☆24Jan 26, 2021Updated 5 years ago
- sub domain wild card filtering tool☆40Apr 18, 2020Updated 6 years ago
- Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"☆357Oct 14, 2020Updated 5 years ago
- differer finds how URLs are parsed by different languages in order to help bug hunters break filters☆62May 3, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Salesforce Policy Deviation Checker☆30Sep 30, 2020Updated 5 years ago
- Find cloud assets that no one wants exposed 🔎 ☁️☆350Jul 20, 2020Updated 5 years ago
- List HackerOne private program assets☆156Jun 24, 2021Updated 4 years ago
- Extract SSL certificate data (Subject Name, Subject Alt Names, Organisation)☆42Nov 10, 2025Updated 7 months ago
- A wrapper around jq, to help you parse jq output!☆30Aug 23, 2020Updated 5 years ago
- The Web Security Testing Guide is a comprehensive open source guide to testing the security of web applications and web services.☆32Oct 27, 2025Updated 7 months ago
- A golang utility to spider through a website searching for additional links.☆343Nov 7, 2020Updated 5 years ago
- A collection of scripts for bug-bounty related stuff☆39Sep 4, 2020Updated 5 years ago
- ☆130Jun 15, 2020Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A checklist of practices for organizations dealing with account takeover (ATO)☆273Oct 4, 2024Updated last year
- Clientside vulnerability / reflected xss fuzzer☆149Jul 29, 2023Updated 2 years ago
- ☆29Sep 25, 2020Updated 5 years ago
- This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes …☆261Oct 16, 2022Updated 3 years ago
- A tool to perform permutations, mutations and alteration of subdomains in golang.☆158Nov 24, 2023Updated 2 years ago
- Client Side Prototype Pollution Scanner☆529Sep 17, 2022Updated 3 years ago
- GraphQL automatic fuzzing tool☆16Jul 16, 2021Updated 4 years ago
- ☆703Nov 27, 2024Updated last year
- Terraform configuration to build a Burp Private Collaborator Server☆29Sep 16, 2018Updated 7 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆645Jul 7, 2025Updated 11 months ago
- Dump all available paths and/or endpoints on WADL file.☆98Nov 24, 2025Updated 6 months ago
- Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3☆2,077Jan 2, 2024Updated 2 years ago
- xss development frameworks, with the goal of making payload writing easier.☆159Aug 7, 2024Updated last year
- ☆14Jul 13, 2020Updated 5 years ago
- Script for monitoring changes in javascript files on WebApps for offensive reconnaissance.☆28Aug 4, 2021Updated 4 years ago
- qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.☆301Feb 12, 2023Updated 3 years ago
- Visualize your Terraform files☆34Sep 9, 2020Updated 5 years ago
- Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.☆1,428Feb 10, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Ffuf output browser☆38Feb 25, 2023Updated 3 years ago
- Tool to check for dependency confusion vulnerabilities in multiple package management systems☆786Aug 19, 2024Updated last year
- Benchmarking repo for secrets scanning☆247Aug 18, 2024Updated last year
- Secret and/or credential patterns used for gf.☆245Feb 10, 2023Updated 3 years ago
- Reverse proxies cheatsheet☆1,883Nov 4, 2023Updated 2 years ago
- MetaSec.js combines all the free open-source security tools to identify issues with JavaScript and automates the boring parts☆82Feb 4, 2023Updated 3 years ago
- A natural evolution of Burp Suite's Repeater tool☆202Apr 15, 2026Updated last month