Pentest · Web Vulnerability Scanners

Web Vulnerability Scanners

• projectdiscovery/nuclei on GitHub, opens in a new tab

  30.6Kstars

  Fast and customizable vulnerability scanner based on simple YAML based DSL.

  Go·MIT License·active·3 hours ago

• sullo/nikto on GitHub, opens in a new tab

  10.7Kstars

  Noisy but fast black box web server and web application vulnerability scanner.

  Perl·Other·active·15 hours ago

• hahwul/dalfox on GitHub, opens in a new tab

  5.2Kstars

  Fast parameter analysis and XSS scanner.

  Rust·MIT License·active·6 hours ago

• andresriancho/w3af on GitHub, opens in a new tab

  4.9Kstars

  Web application attack and audit framework.

  Python·dormant·3 years ago

• r0oth3x49/ghauri on GitHub, opens in a new tab

  4.1Kstars

  Advanced SQL injection detection and exploitation tool.

  Python·MIT License·steady·11 months ago

• bountyyfi/lonkero on GitHub, opens in a new tab

  1Kstars

  Enterprise-grade web vulnerability scanner with 60+ attack modules, built in Rust for penetration testing and security assessments.

  Rust·Other·active·yesterday

• tijme/angularjs-csti-scanner on GitHub, opens in a new tab

  326stars

  Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.

  Python·MIT License·dormant·5 years ago

• 0x48piraj/jiraffe on GitHub, opens in a new tab

  205stars

  Security reconnaissance and vulnerability scanner for Atlassian Jira, focused on misconfigurations, unauthenticated access and CVE validation.

  Python·MIT License·steady·5 months ago

• TheM4hd1/JCS on GitHub, opens in a new tab

  62stars

  Joomla Vulnerability Component Scanner with automatic database updater from exploitdb and packetstorm.

  C#·dormant·8 years ago

• waftester/waftester on GitHub, opens in a new tab

  7stars

  WAF security testing CLI that fingerprints 197+ WAF vendors, benchmarks rule coverage with quantitative scoring, and automates bypass discovery with 70+ evasion techniques.

  Go·Other·active·2 months ago