Web Vulnerability Scanners

whitewidowscanner/whitewidow

SQL Vulnerability Scanner

dwisiswant0/findom-xss

A fast DOM based XSS vulnerability scanner with simplicity.

swisskyrepo/wordpresscan

WPScan rewritten in Python + some WPSeku ideas

rajeshmajumdar/brutexss

BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI.…

arpsyndicate/kenzer

automated web assets enumeration & scanning [DEPRECATED]

rastating/joomlavs

A black box, Ruby powered, Joomla vulnerability scanner

arachni/arachni-ui-web

Arachni's Web User Interface.

sh1yo/request_smuggler

Http request smuggling vulnerability scanner

projectdiscovery/fuzzing-templates

Community curated list of nuclei templates for finding "unknown" security vulnerabilities.

paulsec/spipscan

SPIP (CMS) Scanner for penetration testing purpose written in Python

zerobyte-id/bashter

Web Vulnerability Scanner using Shell Script

xchopath/pathprober

Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once

shopify/ssllabs.rb

Ruby client for the Qualys SSL Labs API enabling automated SSL/TLS server assessment, vulnerability detection (e.g., BEAST), and security grade…

00xc/h2buster

A threaded, recursive, web directory brute-force scanner over HTTP/2.

purpleteam-labs/purpleteam-app-scanner

Application scanning component of purpleteam