psiinon/open-source-web-scannersCurated list of open-source web security scanners, including general-purpose scanners, infrastructure scanners, and fuzzers, ordered by GitHub stars.
A list of open source web security scanners on GitHub and GitLab, ordered by Stars. It does not provide in-depth analysis - for more analysis or a wider range of tools, see the links below.
Note that some large projects have multiple repos - in which case the second most relevant repo is included immediately after and is indented.
Related: open-source-llm-scanners
Tools which can find a range of 'unknown' vulnerabilities on any websites.
| Main Site | Last Commit | Committers | Stars |
|---|---|---|---|
| ZAP |  |  |  |
| - ZAP Extensions |  |  |  |
| Hetty |  |  |  |
| W3af |  |  |  |
| Arachni |  |  |  |
| Astra |  |  |  |
| Wapiti |  |  |  |
| Skipfish |  |  |  |
| Sitadel |  |  |  |
| Taipan |  |  |  |
| Vega |  |  |  |
| Reaper |  |  |  |
| BrowserBruter |  |  |  |
| Tuplar |  |  |  |
| Ugly-duckling |  |  |  |
| Jawfish |  |  |  |
