Community curated list of templates for the nuclei engine to find security vulnerabilities.

Easy automated vulnerability scanning, reporting and analysis

Wazuh - Project documentation

OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.

Zed Attack Proxy Scripts for finding CVEs and Secrets.

JAW: A Graph-based Security Analysis Framework for Client-side JavaScript

Grunt plugin for retire.

Wazuh - RESTful API

Community curated list of templates for the nuclei engine to find security vulnerabilities.

DOM Clobbering Wiki, Browser Testing, and Payload Generation

Wazuh - Splunk App

Static Code Analysis Toolkit for Vulnerability Detection and Mitigation

Passive Web Vulnerability Detection Tool

Sql injection vulnerability scanner

🦖 PTScanner is a powerful tool for detecting Path Traversal and Local File Inclusion (LFI) vulnerabilities. developed as part of the ApachSAL project, it has been fully ported to Node.js, featuring significant enhancements and extended capabilities for modern penetration testing workflows.

This script will scan websites for vulnerabilities. See readme for how to use.

quickly detects OWASP top 10 vulnerabilities in your current tab

An open-source security analysis platform for education and vulnerability discovery.

Automated, repeatable vulnerability scanning for web applications using Playwright for authenticated browsing and OWASP ZAP for active and passive scanning.

Sql injection vulnerability scanner