
nuclei
Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…


A next-generation crawling and spidering framework.

The Swiss Army knife for automated Web Application Testing

0-day malware detection for binaries, source & scripts (that doesn't suck)

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

Automatic SQL injection and database takeover tool

Linux ptrace-based process tracing and debugging utility for inspecting system calls, memory, and program execution flow.

Next generation web scanner

Automatic SSTI detection tool with interactive interface

Web vulnerability scanner written in Python3

A Android malware analysis tool that creates comprehensive runtime profiles by hooking into application behavior across cryptography, file systems,…


WordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

Local-first macOS research browser built on a custom Brave build that captures network traffic, fingerprints, scripts, and runtime evidence for…
