Web Vulnerability Scanners

jaeles-project/jaeles

The Swiss Army knife for automated Web Application Testing

sabri-zaki/easy_hack

Hack the World using Termux

projectdiscovery/httpx

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

ffuf/ffuf

Fast web fuzzer written in Go

hackmanit/web-cache-vulnerability-scanner

Go-based CLI scanner for web cache poisoning and deception. Supports 10 poisoning techniques, multiple deception methods, built-in crawler, JSON…

s0md3v/xsstrike

Most advanced XSS scanner.

awarexone/agentic-bug-hunter

AI-powered bug bounty hunting toolkit that works with or without subscription.

wapiti-scanner/wapiti

Web vulnerability scanner written in Python3

1n3/sn1per

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

rabbitmask/weblogicscan

Automated vulnerability scanner for Oracle WebLogic Server, detecting historical CVEs including deserialization, SSRF, and arbitrary file upload with…

sqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

zaproxy/zaproxy

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

sullo/nikto

Nikto web server scanner

wpscanteam/wpscan

WordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…

urbanadventurer/whatweb

Next generation web scanner

mycode83/godirb

Fast and easy-to-use directory brute-forcer written in Go.