A security tool designed to perform thorough scans on a target using OpenVAS, Zap, and Nexpose. It seamlessly consolidates and integrates the scan results, providing a comprehensive overview of the security vulnerabilities identified.

This is a collection of ZAProxy Automation Tools and scripts to automate security tests of WEB Applications and WEB Sites

Simple OWASP-ZAP API that makes spider and scanner in your web application.

A python script which is designed to integrate vulnerability assessment capabilities using OWASP Zed Attack Proxy (ZAP) into CI/CD platforms and pipelines

This script wrote with Python3 and used OWASP-ZAP APIs

A cybersecurity scanning tool designed to help detect vulnerabilities in SBI (State Bank of India) online systems and related applications.

The script is useful generate a .txt file includes 1-65535 port number for Intruder payloads. Mainly for fuzzer usecase.

A CI/CD Security Pipeline with OWASP ZAP & GitHub Actions

A simple setup for learning and practicing security testing at home. It includes building a small lab environment, running tests on different systems, and exploring how attacks and defenses work in a safe, controlled way. The goal is hands-on learning, not real-world exploitation.

A highly automated and modular bug bounty reconnaissance toolkit integrating over 15 industry-standard tools for streamlined subdomain enumeration, vulnerability detection, and OSINT gathering. Designed for efficiency, scalability, and precision in real-world security assessments.

API for scanning open source projects for CVE's , special vulnerabilities and secrets like API keys and passwords.

Python Security Modules

A Python-based command line tool to fuzz web socket requests.

A collection of resources for bug bounty hunting

OWASP ZAP Proxy Scripts Scan CVE

zap2docker baseline customized to allow credentialed scans

WESSy stands for Web Endpoint Security Scorecard. This Python code scans for legacy crypto &/or software components, public-facing cloud storage repositories, open TCP ports, server configuration gaps, as well as data injection vulnerabilities.