xmendez/wfuzzModular web fuzzer for automated security testing. Injects payloads into any HTTP request field to discover vulnerabilities, brute-force parameters,…
zigrin-security/cakefuzzerCake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific…
1n3/blackwidowA Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
dzonerzy/gowaptGo Web Application Penetration Test
sqlmapproject/sqlmapAutomatic SQL injection and database takeover tool
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
zaproxy/zaproxyOpen-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…
projectdiscovery/katanaA next-generation crawling and spidering framework.
wpscanteam/wpscanWordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…
projectdiscovery/httpxFast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…
owasp/nettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
epi052/feroxbusterA fast, simple, recursive content discovery tool written in Rust.
yogeshojha/renginereNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…
hahwul/dalfoxFast XSS scanner with parameter analysis, WAF fingerprinting, and DOM/AST verification. Supports reflected, stored, and DOM-based XSS detection via…