zaproxy / zap-hudLinks
The ZAP Heads Up Display (HUD)
☆270Updated last week
Alternatives and similar repositories for zap-hud
Users that are interested in zap-hud are comparing it to the libraries listed below
Sorting:
- Antora/Asciidoc content for Bjoern Kimminich's free eBook "Pwning OWASP Juice Shop"☆232Updated last week
- The Secure Coding Framework☆268Updated 5 years ago
- Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"☆359Updated 4 years ago
- A tool geared towards pentesting APIs using OpenAPI definitions.☆182Updated 2 years ago
- A simple web app that helps developers understand the ASVS requirements.☆159Updated 7 months ago
- A simple tool for interacting with OWASP ZAP from the commandline.☆244Updated 2 years ago
- A collection of ZAP scripts and tips provided by the community - pull requests very welcome!☆848Updated this week
- The DevSecOps toolset for REST APIs☆276Updated 2 years ago
- The source of ZAP website☆76Updated last week
- drHEADer helps with the audit of security headers received in response to a single request or a list of requests.☆111Updated 9 months ago
- This repo is no longer in use. Please refer to https://github.com/OWASP/www-project-vulnerable-web-applications-directory☆878Updated last month
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!☆131Updated 2 years ago
- a Damn Vulnerable Serverless Application☆543Updated 2 years ago
- OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development☆184Updated last month
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆106Updated last year
- Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki☆212Updated 11 months ago
- A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.☆559Updated 2 years ago
- ☆276Updated 3 years ago
- Some good resources for getting started with application security☆142Updated 4 years ago
- A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.☆535Updated 2 years ago
- bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.☆547Updated 2 years ago
- Collection of links to Security stuff☆117Updated last month
- These are the regexes that power truffleHog☆218Updated 2 years ago
- ZAP Add-ons☆896Updated this week
- ☆124Updated last year
- Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.☆746Updated 3 years ago
- Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information! It's yo…☆216Updated 5 years ago
- Host and manage multiple Juice Shop instances for security trainings and Capture The Flags☆296Updated this week
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆279Updated last week
- OWASP Testing Guide☆110Updated 9 years ago