Tools

s0md3v/xsstrike

Most advanced XSS scanner.

anonmoty/xxstrike

XSStrike based XSS scanner with custom features. Detects XSS vulnerabilities in web applications.

pwn0sec/pwnxss

PwnXSS: Vulnerability (XSS) scanner exploit

gbrindisi/xsssniper

An automatic XSS discovery tool

dobin/burpsentinel

GUI Burp Plugin to ease discovering of security holes in web applications

wpscanteam/wpscan

WordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…

urbanadventurer/whatweb

Next generation web scanner

sullo/nikto

Nikto web server scanner

enablesecurity/wafw00f

Automated Web Application Firewall fingerprinting tool that identifies and detects over 200 WAF products by analyzing HTTP responses to normal and…

google/honggfuzz

Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

zhzyker/vulmap

Web vulnerability scanner and exploitation tool with POC/EXP modes for known CVEs across webapps such as Weblogic, Shiro, Struts2, and Tomcat;…

splx-ai/agentic-radar

A security scanner for your LLM agentic workflows

cloudflare/security-audit-skill

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

jaeles-project/jaeles

The Swiss Army knife for automated Web Application Testing

cc1a2b/jshunter

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive…

hackmanit/tinja

TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines for eight…

danialhalo/acuautomate

Unofficial Acunetix CLI tool for automated pentesting and bug hunting across large scopes.