Tools

zaproxy/zaproxy

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

vigolium/vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

spinkham/skipfish

Web application security scanner created by lcamtuf for google - Unofficial Mirror

capture0x/xss-loader

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

ostesayed/oste-meta-scan

Multi-engine DAST scanner aggregating Nikto, ZAP, Nuclei, SkipFish, and Wapiti for automated web injection vulnerability detection with consolidated…

fcavallarin/domdig

DOM XSS scanner for Single Page Applications

zigrin-security/cakefuzzer

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific…

fcavallarin/burp-dom-scanner

Burp Suite's extension to scan and crawl Single Page Applications

halilkirazkaya/burpfox

A Burp Suite extension that integrates Dalfox XSS scanner directly into your workflow.

foxvr-sudo/bug-bounty-arsenal-v.3

50+ detectors across 10 categories, with continuous monitoring built in: schedule recurring scans, get alerted only on new findings, track your…

wortell/log4j

Repo containing all info, scripts, etc. related to CVE-2021-44228

razureink/fucker

Penetration testing framework with AI-driven decision engine

aquasecurity/trivy-module-wordpress

Trivy example module for WordPress

eslam3kl/meoweye

MeowEye is a real-time scanner for identifying multiple web vulnerabilities in live applications.

torchiachristian/vulnscan

Scanner di vulnerabilità web in Python: SQL injection, XSS , path traversal, security headers. Crawler, dashboard Flask, report in un PDF

rxerium/fortra-goanywhere-mft-vulnerability-detection

Vulnerability detection scripts for the Goanywhere MFT product.