A list of open source web security scanners on GitHub and GitLab, ordered by Stars. It does not provide in-depth analysis – for more analysis or a wider range of tools, see the links below.
Note that some large projects have multiple repos – in which case the second most relevant repo is included immediately after and is indented.
General Purpose Web Scanners
Tools which can find a range of ‘unknown’ vulnerabilities on any websites.
Main Site | Last Commit | Committers | Stars |
---|---|---|---|
ZAP | |||
– ZAP Extensions | |||
Hetty | |||
W3af | |||
Arachni | |||
Astra | |||
Wapiti | |||
Skipfish | |||
Sitadel | |||
Taipan | |||
Vega | |||
Reaper | |||
BrowserBruter | |||
Tuplar | |||
Ugly-duckling | |||
Jawfish | |||
Pākiki | |||
Browserker |
For more information click here.