Alternatives and similar repositories for manual-source-code-review

Users that are interested in manual-source-code-review are comparing it to the libraries listed below

• adamjsturge / xsshunter-express
  Archived Please go to https://github.com/adamjsturge/xsshunter-go
  ☆31Updated last year
• purabparihar / Web-Application-Pentest-Checklist
  ☆22Updated 3 years ago
• drak3hft7 / OSCP-Exam-Report-Template
  Template used for my OSCP exam.
  ☆29Updated 2 years ago
• gwen001 / bxss
  Alternative to XSS Hunter for blind XSS.
  ☆51Updated 2 years ago
• EasyRecon / wappaGo
  ☆57Updated last year
• trickest / recon-and-vulnerability-scanner-template
  Create your own recon & vulnerability scanner with Trickest and GitHub
  ☆49Updated last year
• MantisSTS / GoCloud
  Checks whether a domain is hosted on a cloud service such as AWS, Azure or CloudFlare
  ☆59Updated 2 years ago
• hakluke / dnstrace
  DNS resolution tracing tool
  ☆34Updated 3 years ago
• carlospolop / Pastos
  ☆55Updated 2 years ago
• akincibor / 403-bypass
  Enhanced 403 bypass header
  ☆21Updated 2 years ago
• carlospolop / Gorks
  ☆68Updated 2 years ago
• six2dez / resolvers_reconftw
  Resolvers updated daily for reconftw
  ☆47Updated 2 years ago
• Ravaan21 / Chandrahasa
  A solid recon tool I use personally.
  ☆30Updated 2 years ago
• 0xRTH / IISRecon
  IIS shortname scanner + bruteforce
  ☆52Updated last year
• projectmonke / shortnameguesser
  A tool to guess the rest of the shortnames provided by vulnerable IIS instances.
  ☆41Updated last year
• Static-Flow / RepeaterSearch
  This extension adds a search bar to the Repeater tab that can be used to highlight all repeater tabs where the request and/or response ma…
  ☆79Updated last year
• Kitsun3Sec / DomainTricks
  ☆14Updated last year
• anmolksachan / JIRAya
  JIRA"YA is a vulnerability analyzer for JIRA instances. It runs active scans to identify vulnerabilities by interacting with the host and…
  ☆35Updated 10 months ago
• honoki / burp-digitalocean-droplet-proxy
  Deploy a SOCKS5 proxy in DigitalOcean and autoconfigure the Burp proxy settings to route all traffic through the droplet
  ☆58Updated 8 months ago
• shabarkin / CodeAllTheThings
  A list of threat sinks used in the manual security source code review for application security
  ☆72Updated 2 years ago
• aniqfakhrul / lazyParam
  A simple automation tool to detect lfi, rce and ssti vulnerability
  ☆55Updated 3 years ago
• MShahine / Bug-Bounty-Recon
  All The Notes And Tips I FOund In Github And Twitter I Put Them Here
  ☆35Updated 4 years ago
• honoki / bbrf-dashboard
  ☆38Updated 4 months ago
• amalmurali47 / swagroutes
  swagroutes is a command-line tool that extracts and lists API routes from Swagger files in YAML or JSON format.
  ☆58Updated 2 years ago
• sidxparab / Subdomain-Enumeration-Guide
  This is a comprehensive Subdomain Enumeration Guide that traces back to my GitBook.
  ☆31Updated 3 months ago
• PatrikFehrenbach / vilicus
  vīlicus is a bug bounty api dashboard
  ☆41Updated last year
• InitRoot / RouteRunner
  Checks if files is accessible based on the source code.
  ☆16Updated last year
• codingo / simple
  A collection of one off hacks and simple scripts
  ☆28Updated 2 years ago
• v1ll41n / H1-Report-Finder
  A burpsuite extension that helps security researchers find public security reports published on h1 based on the selected host
  ☆42Updated 5 years ago
• PatrikFehrenbach / burpsuite-js-extractor
  A simple plugin to export JS files from one or multiple targets
  ☆42Updated last year