Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki
☆215Oct 31, 2024Updated 2 years ago
Alternatives and similar repositories for web-methodology
Users that are interested in web-methodology are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆46Sep 10, 2020Updated 6 years ago
- sub domain wild card filtering tool☆39Apr 18, 2020Updated 6 years ago
- ☆24Jan 26, 2021Updated 5 years ago
- differer finds how URLs are parsed by different languages in order to help bug hunters break filters☆63May 3, 2020Updated 6 years ago
- Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"☆358Oct 14, 2020Updated 6 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- List HackerOne private program assets☆157Jun 24, 2021Updated 5 years ago
- Salesforce Policy Deviation Checker☆30Sep 30, 2020Updated 6 years ago
- Find cloud assets that no one wants exposed 🔎 ☁️☆351Jul 20, 2020Updated 6 years ago
- Terraform configuration to build a Burp Private Collaborator Server☆28Sep 16, 2018Updated 8 years ago
- A command line tool that reads from stdin and strips ANSI color codes from the input.☆10Feb 11, 2023Updated 3 years ago
- Script for monitoring changes in javascript files on WebApps for offensive reconnaissance.☆29Aug 4, 2021Updated 5 years ago
- The Web Security Testing Guide is a comprehensive open source guide to testing the security of web applications and web services.☆32Oct 27, 2025Updated last year
- Extract SSL certificate data (Subject Name, Subject Alt Names, Organisation)☆42Nov 10, 2025Updated 11 months ago
- A checklist of practices for organizations dealing with account takeover (ATO)☆273Oct 4, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- GraphQL automatic fuzzing tool☆15Jul 16, 2021Updated 5 years ago
- Clientside vulnerability / reflected xss fuzzer☆150Jul 29, 2023Updated 3 years ago
- A wrapper around jq, to help you parse jq output!☆30Aug 23, 2020Updated 6 years ago
- A golang utility to spider through a website searching for additional links.☆346Nov 7, 2020Updated 5 years ago
- A collection of scripts for bug-bounty related stuff☆38Sep 4, 2020Updated 6 years ago
- ☆130Jun 15, 2020Updated 6 years ago
- This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes …☆260Oct 16, 2022Updated 4 years ago
- A tools for JavaScript Recon☆24Jul 25, 2020Updated 6 years ago
- ☆29Sep 25, 2020Updated 6 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- 3klector is an automation Recon tool which collecting information about Acquisitions and ASN which related to Big Scope company☆46Sep 19, 2022Updated 4 years ago
- A tool to perform permutations, mutations and alteration of subdomains in golang.☆160Sep 7, 2026Updated last month
- A natural evolution of Burp Suite's Repeater tool☆202Apr 15, 2026Updated 6 months ago
- The Serverless Blind XSS App☆338Mar 28, 2026Updated 7 months ago
- Client Side Prototype Pollution Scanner☆532Sep 17, 2022Updated 4 years ago
- Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exh…☆690Aug 7, 2020Updated 6 years ago
- Dump all available paths and/or endpoints on WADL file.☆97Nov 24, 2025Updated 11 months ago
- Secret and/or credential patterns used for gf.☆245Feb 10, 2023Updated 3 years ago
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆649Jul 7, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- goverview - Get an overview of the list of URLs☆143Dec 5, 2025Updated 10 months ago
- ☆703Nov 27, 2024Updated last year
- Reverse proxies cheatsheet☆1,890Nov 4, 2023Updated 2 years ago
- A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..e…☆1,202Apr 3, 2026Updated 6 months ago
- secretz, minimizing the large attack surface of Travis CI☆325May 30, 2022Updated 4 years ago
- qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.☆300Feb 12, 2023Updated 3 years ago
- ☆14Jul 13, 2020Updated 6 years ago