Tools

zaproxy/zaproxy

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

vigolium/vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

arachni/arachni

Web Application Security Scanner Framework

hahwul/xspear

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

spinkham/skipfish

Web application security scanner created by lcamtuf for google - Unofficial Mirror

capture0x/xss-loader

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

fcavallarin/domdig

DOM XSS scanner for Single Page Applications

ostesayed/oste-meta-scan

Multi-engine DAST scanner aggregating Nikto, ZAP, Nuclei, SkipFish, and Wapiti for automated web injection vulnerability detection with consolidated…

fcavallarin/burp-dom-scanner

Burp Suite's extension to scan and crawl Single Page Applications

zigrin-security/cakefuzzer

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific…

halilkirazkaya/burpfox

A Burp Suite extension that integrates Dalfox XSS scanner directly into your workflow.

foxvr-sudo/bug-bounty-arsenal-v.3

50+ detectors across 10 categories, with continuous monitoring built in: schedule recurring scans, get alerted only on new findings, track your…

wortell/log4j

Repo containing all info, scripts, etc. related to CVE-2021-44228

aquasecurity/trivy-module-wordpress

Trivy example module for WordPress

eslam3kl/meoweye

MeowEye is a real-time scanner for identifying multiple web vulnerabilities in live applications.

razureink/fucker

Penetration testing framework with AI-driven decision engine