Alternatives and similar repositories for zap-hud

Users that are interested in zap-hud are comparing it to the libraries listed below

• BBVA / apicheck
  The DevSecOps toolset for REST APIs
  ☆277Updated 2 years ago
• dxa4481 / truffleHogRegexes
  These are the regexes that power truffleHog
  ☆222Updated 3 years ago
• juice-shop / pwning-juice-shop
  Antora/Asciidoc content for Bjoern Kimminich's free eBook "Pwning OWASP Juice Shop"
  ☆231Updated last week
• SecurityRAT / SecurityRAT
  OWASP SecurityRAT (version 1.x) - Tool for handling security requirements in development
  ☆187Updated 4 months ago
• RhinoSecurityLabs / Swagger-EZ
  A tool geared towards pentesting APIs using OpenAPI definitions.
  ☆183Updated 3 years ago
• tomdev / teh_s3_bucketeers
  ☆276Updated 4 years ago
• doyensec / burpdeveltraining
  Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"
  ☆359Updated 5 years ago
• OWASP / RiskAssessmentFramework
  The Secure Coding Framework
  ☆271Updated 5 years ago
• Santandersecurityresearch / asvs
  A simple web app that helps developers understand the ASVS requirements. Now supporting ASVS 5.0
  ☆163Updated last month
• koenbuyens / securityheaders
  Check any website (or set of websites) for insecure security headers.
  ☆255Updated 2 years ago
• DevSlop / Pixi
  The Pixi module is a MEAN Stack web app with wildly insecure APIs!
  ☆133Updated 3 years ago
• OWASP / OWASP-VWAD
  This repo is no longer in use. Please refer to https://github.com/OWASP/www-project-vulnerable-web-applications-directory
  ☆882Updated 3 weeks ago
• nccgroup / tracy
  A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.
  ☆557Updated 2 years ago
• juice-shop / multi-juicer
  Host and manage multiple Juice Shop instances for security trainings and Capture The Flags
  ☆305Updated this week
• LewisArdern / bXSS
  bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
  ☆561Updated 2 years ago
• jobertabma / transformations
  ☆173Updated 2 years ago
• N0MoreSecr3ts / wraith
  Uncover forgotten secrets and bring them back to life, haunting security and operations teams.
  ☆209Updated 2 years ago
• imperva / automatic-api-attack-tool
  Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an outp…
  ☆490Updated 2 years ago
• fransr / bountyplz
  Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)
  ☆458Updated 6 years ago
• BlazingWind / OWASP-ASVS-4.0-testing-guide
  ☆124Updated 2 years ago
• RhinoSecurityLabs / GCPBucketBrute
  A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
  ☆550Updated 2 years ago
• tprynn / web-methodology
  Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki
  ☆212Updated last year
• zaproxy / zaproxy-website
  The source of ZAP website
  ☆76Updated this week
• yeswehack / pwn-machine
  PwnMachine is a self hosting solution based on docker aiming to provide an easy to use pwning station for bug hunters.
  ☆322Updated last year
• secdec / attack-surface-detector-burp
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆110Updated 2 years ago
• koenrh / s3enum
  Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.
  ☆262Updated 3 weeks ago
• OWASP / DVSA
  a Damn Vulnerable Serverless Application
  ☆545Updated 2 years ago
• Santandersecurityresearch / DrHeader
  drHEADer helps with the audit of security headers received in response to a single request or a list of requests.
  ☆112Updated 11 months ago
• proabiral / inception
  A highly configurable Framework for easy automated web scanning
  ☆380Updated 5 years ago
• security-prince / Resources-for-Application-Security
  Some good resources for getting started with application security
  ☆143Updated 4 years ago