#1
xmendez/wfuzzModular web fuzzer for automated security testing. Injects payloads into any HTTP request field to discover vulnerabilities, brute-force parameters,…
andresriancho/w3afOpen-source web application security scanner that identifies and exploits 200+ vulnerabilities including XSS, SQL injection, and OS commanding.…
enablesecurity/wafw00fAutomated Web Application Firewall fingerprinting tool that identifies and detects over 200 WAF products by analyzing HTTP responses to normal and…
ignitetechnologies/burpsuite-for-pentesterThis cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and…
bugcrowd/huntFlags parameters commonly associated with injection, SSRF, path traversal, IDOR, and SSTI, via passive Burp/ZAP scanning; also organizes manual…
ghosttroops/scan4allOfficial repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…
sabri-zaki/easy_hackHack the World using Termux
jaeles-project/jaelesThe Swiss Army knife for automated Web Application Testing
wapiti-scanner/wapitiWeb vulnerability scanner written in Python3
danmcinerney/xsscrapyXSS spider - 66/66 wavsep XSS detected
zhzyker/vulmapWeb vulnerability scanner and exploitation tool with POC/EXP modes for known CVEs across webapps such as Weblogic, Shiro, Struts2, and Tomcat;…
tomnomnom/gfA wrapper around grep, to help you grep for things
erev0s/vampiVulnerable REST API with OWASP top 10 vulnerabilities for security testing
assetnote/kiterunnerHigh-speed API and web content discovery tool that bruteforces routes using compiled Swagger datasets, supporting depth scanning, custom wordlists,…
cert-polska/artemisA modular vulnerability scanner with automatic report generation capabilities.
1n3/blackwidowA Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
psiinon/open-source-web-scannersCurated list of open-source web security scanners, including general-purpose scanners, infrastructure scanners, and fuzzers, ordered by GitHub stars.
