#1Automated tools for detecting common web application flaws (e.g., XSS, SQLi).
Kitploit recommended
jet-pentest/bdu-2023-05144BDU:2023-05144 Nuclei checker
ashangp923/cve-2023-3971To find HTML injection and XSS
bishopfox/cve-2026-19490-checkSafely detect Citrix NetScaler SAML auth bypass CVE-2026-19490
yeee3642/edu-reconAuthorized education-sector recon & triage orchestrator (nmap/dirsearch/sqlmap/hydra + CVE-2024-4577, secret/API-key leak, XSS, wp2shell) with a web…
mycode83/godirbFast and easy-to-use directory brute-forcer written in Go.
rabbitmask/weblogicscanAutomated vulnerability scanner for Oracle WebLogic Server, detecting historical CVEs including deserialization, SSRF, and arbitrary file upload with…
arachni/arachniWeb Application Security Scanner Framework
yahoo/gryffinGryffin is a large scale web security scanning platform.
hahwul/xspear🔱 Powerfull XSS Scanning and Parameter analysis tool&gem
the-robot/sqlivmassive SQL injection vulnerability scanner
fit2cloud/riskscannerRiskScanner 是开源的多云安全合规扫描平台，基于 Cloud Custodian 和 Nuclei 引擎，实现对主流公(私)有云资源的安全合规扫描和漏洞扫描。
abacus-group-rto/legionLegion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance…
whitewidowscanner/whitewidowSQL Vulnerability Scanner
dwisiswant0/findom-xssA fast DOM based XSS vulnerability scanner with simplicity.
swisskyrepo/wordpresscanWPScan rewritten in Python + some WPSeku ideas
rajeshmajumdar/brutexssBruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI.…
