Tools

1n3/blackwidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

fcavallarin/htcap

htcap is a web application scanner able to crawl single page application (SPA) recursively by intercepting ajax calls and DOM changes.

spinkham/skipfish

Web application security scanner created by lcamtuf for google - Unofficial Mirror

danmcinerney/xsscrapy

XSS spider - 66/66 wavsep XSS detected

gbrindisi/xsssniper

An automatic XSS discovery tool

cappricio-securities/crlfi-scanner

CRLFISCANNER is a lightweight and powerful CLI tool designed for bug bounty hunters and penetration testers to automatically detect CRLF injection…

0xkayala/nucleifuzzer

Automated web vulnerability scanner combining URL discovery tools (ParamSpider, waybackurls, gauplus, hakrawler, katana) with Nuclei fuzzing…

dzonerzy/gowapt

Go Web Application Penetration Test

0xinfection/tidos-framework

The Offensive Manual Web Application Penetration Testing Framework.

destine21/zipfileraider

ZIP File Raider - Burp Extension for ZIP File Payload Testing

fuzzdb-project/fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

ghosttroops/scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…

hackmanit/tinja

TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines for eight…

skylined/bugid

Detect, analyze and uniquely identify crashes in Windows applications

narfindustries/http-garden

Differential testing framework for HTTP implementations

google/oss-fuzz-gen

LLM powered fuzzing via OSS-Fuzz.

vladko312/sstimap

Automatic SSTI detection tool with interactive interface