Web Scan Lazy Tools - Python Package

The OSTE meta scanner is a comprehensive web vulnerability scanner that combines multiple DAST scanners, including Nikto Scanner, ZAP, Nuclei, SkipFish, and Wapiti.

OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.

Small & Fast Vulnerability Scanner Engine based on XRAY YAML Rule | 基于 XRAY YAML 规则的超轻量快速漏洞扫描引擎 | 基于 ANTLR 实现语法分析和完整的 XRAY YAML 规则实现 | 简单的启动参数 | 包含多种反连可用 | 可执行文件体积仅 2 MB

Find any website vulnerability and bugs in few second.

CoupDeWeb is an automated web vulnerability scanner designed for security researchers and developers. It scans for potential vulnerable endpoints, targeting various types of vulnerabilities such as XSS, SQL Injection, and more.

A GitHub Action that scans your public web applications after every deployment. Add this to your dev, staging and prod steps and SecureStack will make sure that what you've just deployed is secure and meets your requirements.

A web vulnerability scanner python script.

All of our GitHub Actions rolled into one. Or as we like to say: One GitHub Action to rule them all!

AI web vulneraribilty scanner 🤖

Web Vulnerability Scanner written in Golang.

A .NET core project for web based pen testing

This script will scan websites for vulnerabilities. See readme for how to use.

Another parser for server logs to find potential vulnerabilities

"JMT" stands for "Jinjja Michine Tool" and is a tool for diagnosing vulnerabilities in websites. This tool is a 2023 graduation project and was created for security checks by startups and small businesses by determining website vulnerabilities through the Google search engine.

📌 Web Vulnerability Scanner

Ferramenta de análise de vulnerabilidades XSS em formulários web, com dashboard interativo e recomendações de segurança.

open source and free tools for bug and vulnerability discovery

Web-Exploit-Toolkit AKA WET: A Python-based tool for automated testing of common web vulnerabilities like XSS, CSRF, SQL Injection, HTML Injection, Open Redirect, and Directory Traversal. Supports GET/POST injection, custom payloads, cookie/session authentication, and OS-aware payload optimization. Designed for authorized security testing only.