Tools

cappricio-securities/aem-xss

Adobe Experience Manager Childlist Selector - Cross-Site Scripting

shoucheng3/spring-cloud__spring-cloud-gateway_cve-2022-22947_3-0-6

Spring Cloud Gateway repository demonstrating CVE-2022-22947 exploitation for API security testing and vulnerability analysis.

dwisiswant0/findom-xss

A fast DOM based XSS vulnerability scanner with simplicity.

sullo/nikto

Nikto web server scanner

wpscanteam/wpscan

WordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…

s0md3v/xsstrike

Most advanced XSS scanner.

hahwul/dalfox

Fast XSS scanner with parameter analysis, WAF fingerprinting, and DOM/AST verification. Supports reflected, stored, and DOM-based XSS detection via…

jaeles-project/jaeles

The Swiss Army knife for automated Web Application Testing

graysignal/cve-2024-38856-apacheofbiz

Exploit for CVE-2024-38856 affecting Apache OFBiz versions before 18.12.15

testardou/cve-2026-65540

Popup for CF7 with Sweet Alert <= 1.6.5 - Cross-Site Request Forgery

boneys/cve-2025-12101-scanner-poc

Multi-threaded scanner for CVE-2025-12101, a reflected XSS in Citrix NetScaler, with single/multi-host scanning, dual protocol testing, proxy…

halilkirazkaya/burpfox

A Burp Suite extension that integrates Dalfox XSS scanner directly into your workflow.

jas502n/burpsuite_pro_v1.7.37

Comprehensive web application security testing platform featuring advanced scanning engine, intercepting proxy, and automated vulnerability detection…

sqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

projectdiscovery/nuclei

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

ffuf/ffuf

Fast web fuzzer written in Go

maurosoria/dirsearch

Web path scanner

projectdiscovery/katana

A next-generation crawling and spidering framework.