Alternatives and similar repositories for cstc:

Users that are interested in cstc are comparing it to the libraries listed below

• mschwager / route-detect
  Find authentication (authn) and authorization (authz) security bugs in web application routes.
  ☆260Updated last month
• usdAG / FlowMate
  FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application a…
  ☆157Updated 5 months ago
• intruder-io / guidtool
  A tool to inspect and attack version 1 GUIDs
  ☆219Updated 2 years ago
• 0xC01DF00D / Collabfiltrator
  Exfiltrate blind Remote Code Execution and SQL injection output over DNS via Burp Collaborator.
  ☆267Updated 2 months ago
• cybervelia / graphicator
  A GraphQL enumeration and extraction tool
  ☆131Updated 2 years ago
• wallarm / jwt-heartbreaker
  The Burp extension to check JWT (JSON Web Tokens) for using keys from known from public sources
  ☆130Updated 4 years ago
• forcesunseen / graphquail
  Burp Suite extension that offers a toolkit for testing GraphQL endpoints.
  ☆192Updated 8 months ago
• snyk / socketsleuth
  Burp Extension to add additional functionality for pentesting websocket based applications
  ☆93Updated 10 months ago
• yeswehack / pp-finder
  PP-finder Help you find gadget for prototype pollution exploitation
  ☆156Updated 8 months ago
• Invicti-Security / brainstorm
  A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery
  ☆296Updated 4 months ago
• CoreyD97 / Stepper
  A natural evolution of Burp Suite's Repeater tool
  ☆197Updated last year
• nccgroup / CollaboratorPlusPlus
  ☆148Updated 3 years ago
• akabe1 / OAUTHScan
  Burp Suite Extension useful to verify OAUTHv2 and OpenID security
  ☆173Updated 5 months ago
• sansatart / scrapts
  Scrapts Scrapts Scrapts
  ☆236Updated last year
• trickest / find-gh-poc
  Find CVE PoCs on GitHub
  ☆147Updated last year
• PortSwigger / autowasp
  BurpSuite Extension: A one-stop pen testing checklist and logger tool
  ☆265Updated 2 years ago
• putsi / privatecollaborator
  A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate
  ☆209Updated 9 months ago
• pry0cc / proteus
  A projectdiscovery driven attack surface monitoring bot powered by axiom
  ☆182Updated 2 years ago
• srini0x00 / dvta
  Damn Vulnerable Thick Client App developed in C# .NET
  ☆152Updated last year
• NotSoSecure / cloud-service-enum
  ☆245Updated 9 months ago
• PortSwigger / bambdas
  Bambdas collection for Burp Suite Professional and Community.
  ☆259Updated this week
• bcoles / jira_scan
  A simple remote scanner for Atlassian Jira
  ☆120Updated 2 years ago
• doyensec / wsrepl
  WebSocket REPL for pentesters
  ☆218Updated 8 months ago
• cramppet / regulator
  Automated learning of regexes for DNS discovery
  ☆364Updated 2 years ago
• GoSecure / xxe-workshop
  Workshop given at Hack in Paris 2019
  ☆121Updated last year
• Brum3ns / firefly
  Black box fuzzer for web applications
  ☆425Updated 9 months ago
• d0ge / sign-saboteur
  SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens
  ☆156Updated 4 months ago
• Static-Flow / BurpSuite-Team-Extension
  This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes …
  ☆258Updated 2 years ago
• elttam / semgrep-rules
  ☆188Updated 5 months ago
• hakluke / hakscale
  Distribute ordinary bash commands over many systems
  ☆162Updated 2 years ago