#1Automated tools for detecting common web application flaws (e.g., XSS, SQLi).
Kitploit recommended
spinkham/skipfishWeb application security scanner created by lcamtuf for google - Unofficial Mirror
v35hr4j/cve-2022-1597The plugin, used as a companion for the Discy and Himer themes, does not sanitise and escape a parameter on its reset password form which makes it…
jaeles-project/jaeles-signaturesDefault signature for Jaeles Scanner
arpsyndicate/kenzerautomated web assets enumeration & scanning [DEPRECATED]
azmisyahrul/prismsecSecure, modular MCP server wrapping nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap for AI-powered pentesting
rxerium/cve-2025-53072-cve-2025-62481Detection for CVE-2025-53072 + CVE-2025-62481
redhuntlabs/log4jhuntAn automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.
ashangp923/cve-2023-3971To find HTML injection and XSS
capture0x/xss-loaderXss Payload Generator ~ Xss Scanner ~ Xss Dork Finder
teycir/burpapisecuritysuiteBurp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integration, and…
menkrep1337/xssconXSSCon: Simple XSS Scanner tool
rxerium/n8n-vulnerability-detectionVulnerability detection scripts for the n8n product.
owasp/nettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
dermotblair/webvulscanWeb Application Vulnerability Scanner.
hahwul/dalfoxFast XSS scanner with parameter analysis, WAF fingerprinting, and DOM/AST verification. Supports reflected, stored, and DOM-based XSS detection via…
j3ssie/dynast-benchA DAST benchmark of intentionally-vulnerable apps with ground-truth answer keys for scoring scanners
danmcinerney/xsscrapyXSS spider - 66/66 wavsep XSS detected
hackingteamoficial/getrobarbAutomated reconnaissance and XSS detection framework integrating subfinder, httpx, katana, gospider, waybackurls, and dalfox into a 9-stage pipeline…
