arachni

Web App Scanner

A modular web application security scanner framework that integrates browser environments and can adjust to dynamic applications

Web Application Security Scanner Framework

GitHub

4k stars
206 watching
765 forks
Language: Ruby
last commit: over 1 year ago
Linked from 1 awesome list

analysisarachniauditcrawlerdetectiondomhackhackingjavascriptmodularpenetration-testingrubyscannerscannerssecurity-auditsql-injectionvulnerability-detectionweb-applicationxss

Backlinks from these awesome lists:

Related projects:

Repository Description Stars
zaproxy/zaproxy Automatically finds security vulnerabilities in web applications during development and testing. 12,847
ksharinarayanan/ssrfire An automated tool to discover potential Server-Side Request Forgery (SSRF) vulnerabilities in web applications by scanning the domain for open redirects and testing for cross-site scripting (XSS) 953
chrisandoryan/nethive-project An SIEM system that uses machine learning and CVSS measurements to detect security threats. 3
0xsauby/yasuo Scans for vulnerable 3rd-party web applications on a network 570
mindpatch/lorsrf A tool designed to identify parameters in web applications that can be exploited for SSRF or out-of-band resource load attacks. 291
smicallef/spiderfoot Automates information gathering and analysis from various data sources to support threat intelligence and cybersecurity efforts 13,364
abhinavbom/clara Scans S3 buckets for malware using ClamAV and Yara signatures in real-time 32
nationalsecurityagency/ghidra A software reverse engineering framework with disassembler and analysis tools 52,492
damian89/extended-ssrf-search An SSRF scanner written in Python to identify potential vulnerabilities by scanning predefined settings in URLs and request headers. 276
opennhp/opennhp A Zero Trust protocol that leverages resource-hiding and encryption to safeguard servers and data from attackers 13,520
thesp0nge/dawnscanner A security scanner designed to review web applications for potential vulnerabilities. 736
shenril/sitadel A tool for identifying vulnerabilities in web applications using automated attacks and fingerprinting 555
gauravnarwani97/trishul Automated vulnerability detection tool for web applications 235
praetorian-inc/noseyparker A tool that scans textual data and Git history to detect sensitive information such as credentials and secrets. 1,716
gotham-rs/gotham A web framework designed to promote stability, safety, security, and speed by leveraging Rust's static typing, async support, and fast server capabilities. 2,240