Vega
subgraph/vegaOpen-source web application security scanner with automated vulnerability detection, proxy interception, and SSL/TLS testing for penetration testers…
api-security-testingdynamic-analysis-sandboxingpenetration-testing+3
362
subgraph/vegaOpen-source web application security scanner with automated vulnerability detection, proxy interception, and SSL/TLS testing for penetration testers…
matank001/moxyOpen-source DAST proxy with agentic AI for intercepting, modifying, and replaying HTTP/HTTPS traffic. Automates web application security testing via…
urbanadventurer/whatwebWeb technology identification scanner with 1800+ plugins for detecting CMS, servers, JS libraries, and embedded devices. Supports stealthy to…
purpleteam-labs/purpleteam-server-scannerAutomated server vulnerability scanner integrated into CI/CD pipelines for security regression testing of web applications and cloud infrastructure.
purpleteam-labs/purpleteamCLI-driven security regression testing framework integrating OWASP ZAP and Selenium for automated web application penetration testing in CI/CD…
purpleteam-labs/purpleteam-app-scannerAutomated web application security scanner integrated with OWASP ZAP for CI/CD pipelines. Performs vulnerability detection and security regression…
sullo/niktoPerl-based web server scanner that performs comprehensive vulnerability checks, CGI scanning, and server fingerprinting with customizable plugins and…
corazawaf/corazaGo-based Web Application Firewall library compatible with ModSecurity SecLang rules and OWASP Core Rule Set v4, providing real-time HTTP traffic…
enablesecurity/wafw00fAutomated Web Application Firewall fingerprinting tool that identifies and detects over 200 WAF products by analyzing HTTP responses to normal and…
jaeles-project/jaelesThe Swiss Army knife for automated Web Application Testing
quitten/autorizeAutomatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application…
papamica/waf-checkerWeb application firewall testing tool with 344+ attack payloads, auto WAF detection, bypass techniques, and full reconnaissance including DNS,…
0x4d31/burpaBurp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application…
sobri3195/pegasus-pentest-arsenalA comprehensive web application security testing toolkit that combines 10 powerful penetration testing features into one tool.
havoc10-sw/detect_polyfill_cve-2024-38537-Here's a Python script that checks if the polyfill.io domain is present in the Content Security Policy (CSP) header of a given web application.
authcov/authcovWeb app authorisation coverage scanning
hackmanit/tinjaCLI tool for automated detection of server-side and client-side template injection vulnerabilities across 44 template engines in 8 programming…
sech0us3/waf-checkerAutomated WAF assessment tool that detects firewall vendors, tests 19 attack categories with advanced evasion payloads, and provides color-coded…