zaproxy / zap-hudLinks
The ZAP Heads Up Display (HUD)
☆271Updated this week
Alternatives and similar repositories for zap-hud
Users that are interested in zap-hud are comparing it to the libraries listed below
Sorting:
- Antora/Asciidoc content for Bjoern Kimminich's free eBook "Pwning OWASP Juice Shop"☆232Updated this week
- The DevSecOps toolset for REST APIs☆277Updated 2 years ago
- Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"☆359Updated 5 years ago
- A simple web app that helps developers understand the ASVS requirements. Now supporting ASVS 5.0☆164Updated 2 weeks ago
- OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development☆186Updated 3 months ago
- The Secure Coding Framework☆271Updated 5 years ago
- A tool geared towards pentesting APIs using OpenAPI definitions.☆182Updated 3 years ago
- a Damn Vulnerable Serverless Application☆545Updated 2 years ago
- A simple tool for interacting with OWASP ZAP from the commandline.☆252Updated 2 years ago
- A collection of ZAP scripts and tips provided by the community - pull requests very welcome!☆859Updated this week
- ZAP Add-ons☆907Updated this week
- These are the regexes that power truffleHog☆222Updated 3 years ago
- Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an outp…☆490Updated 2 years ago
- Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.☆260Updated 4 months ago
- A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.☆543Updated 2 years ago
- bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.☆559Updated 2 years ago
- ☆276Updated 4 years ago
- Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.☆750Updated 3 years ago
- Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki☆212Updated last year
- The source of ZAP website☆76Updated this week
- Find AWS S3 buckets and test their permissions.☆395Updated 2 years ago
- ZAP Python API☆198Updated this week
- A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.☆558Updated 2 years ago
- A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestrat…☆279Updated last week
- A starter secure code review checklist☆184Updated 7 years ago
- Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information! It's yo…☆218Updated 6 years ago
- This repo is no longer in use. Please refer to https://github.com/OWASP/www-project-vulnerable-web-applications-directory☆881Updated 2 weeks ago
- Host and manage multiple Juice Shop instances for security trainings and Capture The Flags☆301Updated this week
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆109Updated last year
- REST/JSON API to the Burp Suite security tool.☆561Updated 5 months ago