Skip to content
#

web-security-scanner

Star

Here are 31 public repositories matching this topic...

Language: All
Filter by language
All 31 Python 14 PHP 4 Go 3 JavaScript 3 HTML 1 Java 1 TypeScript 1
Sort: Most stars
Sort options
Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

DrXOps / pentool

Star 10

A modern, console-based web penetration testing toolkit with a TUI. Features an HTTP/HTTPS proxy, active/passive vulnerability scanner, Repeater, Intruder, Spider, and more. Free & open-source.

python security proxy textual tui penetration-testing asyncio web-security pentest-tool vulnerability-scanner penetration-testing-framework penetration-testing-tools web-security-tool web-security-scanner burp-suite-alternative
  • Updated Nov 6, 2026
  • Python

Tagoletta / AccessContextFuzzer

Sponsor
Star 7

🛡️ Burp Suite extension for automated access control bypass, path traversal & Web Cache Deception testing. Header spoofing, URL encoding, cache deception pipelines – all in one tool.

penetration-testing web-security fuzzer bypass access-control web-security-research security-testing bypass-waf path-traversal burp-suite web-cache-deception montoya-api header-bypasser web-security-scanner burp-extension bypass-firewal
  • Updated Nov 4, 2026
  • Java

sylhetyhackvenger / SubOracle

Star 6

SubOracle is an advanced subdomain intelligence and attack surface reconnaissance framework designed for security researchers and penetration testers. It helps identify digital assets, discover subdomains, analyze external footprints, and improve visibility of an organization's online infrastructure through structured reconnaissance workflow.

security-tools reconnaissance penetration-testing-framework information-gathering-tools subdomain-enumeration subdomain-discovery osint-tools networking-tools attack-surface-management web-security-scanner gray-hat-hacking-tools offensive-tools sylhetyhackvenger suboracle grayhathacker
  • Updated Aug 29, 2026
  • Python

himfatihoner / scaNNer

Star 4

Single-binary, web-UI penetration-testing scan orchestrator — one Go binary drives ~34 modules (nmap, nuclei, wpscan, hydra, impacket, netexec…) into structured findings. Async & cancellable, with RBAC, 2FA, a VPN killswitch, an assets inventory and CSV/JSON/PDF reports.

self-hosted penetration-testing web-security pentesting vulnerability-detection offensive-security vulnerability-management vulnerability-scanners security-scanner vulnerability-assessment security-automation security-tools vulnerability-scanning vulnerability-scanner security-testing penetration-testing-framework penetration-testing-tool cybersecurity-tools cybersecurity-projects web-security-scanner
  • Updated Nov 5, 2026
  • Go
Website-Vulnerability-Scanner

RanaKhan77 / Website-Vulnerability-Scanner

Star 4

Open-source website vulnerability scanner — deterministic, tool-based scanning across OWASP classes: XSS, SQLi, SSRF, subdomain takeover, WordPress, MCP & AI/LLM security, JS library SCA. CVSS-scored evidence, HTML/PDF reports, continuous monitoring. Zero AI, self-hosted, Docker.

security-audit owasp cybersecurity penetration-testing bug-bounty infosec web-security pentesting web-vulnerability-scanner security-scanner vulnerability-assessment ethical-hacking security-tools web-scanner web-application-security vulnerability-scanner security-testing website-security website-scanner web-security-scanner
  • Updated Nov 7, 2026
  • PHP

sylhetyhackvenger / HeartBleed-Pro

Star 4

Try it Now... Recon, VA, & Business Logic Scan in one powerhouse tool. Expose hidden risks and logic flaws others miss. Zero noise, 360° visibility.

security-audit owasp penetration-testing bug-bounty infosec application-security business-logic vulnerability-assessment heartbleed security-monitoring ethical-hacking-tools pentest-report redteam-tools automated-security-testing web-security-scanner gray-hat-hacking-tools business-logic-abuse sylhetyhackvenger the-error808 web-security-platform
  • Updated Aug 22, 2026
  • Python

LogicLune / Sentriq-AI

Star 1

Sentriq AI — A local-first web security assessment toolkit for authorized SQL injection testing, authentication and access-control checks, Supabase/PostgreSQL auditing, and evidence-based security reports.

python postgresql cybersecurity sql-injection application-security web-security cyber-security web-security-research security-testing sql-injection-attacks sql-injection-exploitation supabase web-security-scanner application-security-tools security-testing-validation
  • Updated Oct 13, 2026
  • Python

mrmtwoj / owasp-wstg-assessment

Star 0

OWASP WSTG Assessment Suite & Checklist Editor — 248+ structured security tests, 10 OWASP categories, 100% offline & client-side, 7-language support (RTL for FA/AR), POC evidence management, and Word/JSON reporting. No backend required.

security-audit owasp penetration-testing poc web-security vulnerability-management security-tools web-security-research security-auditing-tool word-report penetration-testing-tools security-audits wstg security-auditing web-security-tool security-tools-testing vulnerability-management-platform web-security-scanner vulnerability-management-cybersecurity
  • Updated Nov 6, 2026
  • HTML

nn0z / XSS-Scanner

Star 0

XSS Injection Scanner is an automated security testing tool designed to detect Cross-Site Scripting (XSS) vulnerabilities in web applications

automation cybersecurity penetration-testing bug-bounty web-security xss-scanners xss-scanner vulnerability-scanners security-tools vulnerability-scanner security-tool penetration-testing-tools bug-bounty-hunters automated-scanner bug-bounty-tools bug-bounty-automation cybersecurity-tools web-security-tool web-security-scanner vulnerability-scanner-tools
  • Updated Oct 23, 2026
  • Python

Add this topic to your repo

To associate your repository with the web-security-scanner topic, visit your repo's landing page and select "manage topics."

Learn more