zaproxy / zap-hudLinks
The ZAP Heads Up Display (HUD)
☆270Updated this week
Alternatives and similar repositories for zap-hud
Users that are interested in zap-hud are comparing it to the libraries listed below
Sorting:
- Antora/Asciidoc content for Bjoern Kimminich's free eBook "Pwning OWASP Juice Shop"☆231Updated this week
- The DevSecOps toolset for REST APIs☆276Updated 2 years ago
- The Secure Coding Framework☆268Updated 5 years ago
- A tool geared towards pentesting APIs using OpenAPI definitions.☆182Updated 3 years ago
- These are the regexes that power truffleHog☆218Updated 2 years ago
- Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"☆358Updated 5 years ago
- A collection of ZAP scripts and tips provided by the community - pull requests very welcome!☆853Updated this week
- A simple tool for interacting with OWASP ZAP from the commandline.☆248Updated 2 years ago
- A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.☆536Updated 2 years ago
- The OWASP SecureTea Project provides a one-stop security solution for various devices (personal computers / servers / IoT devices)☆301Updated 2 years ago
- A simple web app that helps developers understand the ASVS requirements.☆161Updated last week
- OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development☆184Updated 2 months ago
- a Damn Vulnerable Serverless Application☆544Updated 2 years ago
- A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.☆560Updated 2 years ago
- Host and manage multiple Juice Shop instances for security trainings and Capture The Flags☆298Updated this week
- The source of ZAP website☆76Updated this week
- ZAP Add-ons☆897Updated this week
- Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki☆212Updated last year
- ☆276Updated 4 years ago
- Check any website (or set of websites) for insecure security headers.☆253Updated 2 years ago
- The Pixi module is a MEAN Stack web app with wildly insecure APIs!☆133Updated 2 years ago
- Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.☆748Updated 3 years ago
- ☆173Updated 2 years ago
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆106Updated last year
- Uncover forgotten secrets and bring them back to life, haunting security and operations teams.☆209Updated 2 years ago
- This repo is no longer in use. Please refer to https://github.com/OWASP/www-project-vulnerable-web-applications-directory☆878Updated this week
- Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an outp…☆487Updated 2 years ago
- drHEADer helps with the audit of security headers received in response to a single request or a list of requests.☆111Updated 9 months ago
- A highly configurable Framework for easy automated web scanning☆379Updated 5 years ago
- PwnMachine is a self hosting solution based on docker aiming to provide an easy to use pwning station for bug hunters.☆321Updated last year