web-security-scanner

OWASP Web Recon & Directory Discovery Platform

Discover new target domains using Content Security Policy

🐛 Advanced web vulnerability scanner with 5-rule false-positive reduction, WAF evasion, and modern HTML reports

PERL-based website Admin Panel Finder - website security testing, and admin login path discovery.

A modern, console-based web penetration testing toolkit with a TUI. Features an HTTP/HTTPS proxy, active/passive vulnerability scanner, Repeater, Intruder, Spider, and more. Free & open-source.

Automated web-based vulnerability scanner designed to identify common security flaws such as SQL Injection and XSS. WAVSS crawls websites, performs comprehensive scans, and generates detailed PDF reports with remediation guidance.

Audit keamanan web: masukkan URL, keluar rapor A-F berisi celah + cara perbaikinya. PHP, tanpa dependency.

🛡️ Burp Suite extension for automated access control bypass, path traversal & Web Cache Deception testing. Header spoofing, URL encoding, cache deception pipelines – all in one tool.

SubOracle is an advanced subdomain intelligence and attack surface reconnaissance framework designed for security researchers and penetration testers. It helps identify digital assets, discover subdomains, analyze external footprints, and improve visibility of an organization's online infrastructure through structured reconnaissance workflow.

Single-binary, web-UI penetration-testing scan orchestrator — one Go binary drives ~34 modules (nmap, nuclei, wpscan, hydra, impacket, netexec…) into structured findings. Async & cancellable, with RBAC, 2FA, a VPN killswitch, an assets inventory and CSV/JSON/PDF reports.

Open-source website vulnerability scanner - 202 deterministic scanner modules: XSS, SQLi, SSRF, subdomain takeover, OWASP Top 10, WordPress, MCP & AI/LLM security, JS library SCA. CVSS-scored evidence, HTML/PDF reports, continuous monitoring. Zero AI, self-hosted, Docker.

Try it Now... Recon, VA, & Business Logic Scan in one powerhouse tool. Expose hidden risks and logic flaws others miss. Zero noise, 360° visibility.

🦄 All-in-one website intelligence tool. Replaces whois, whatmydns, wpscan & who.is in one free web app. Built for authorized security recon.

1 bilion % sure you web app has so much issue and i can find it easily ...

Sentriq AI — A local-first web security assessment toolkit for authorized SQL injection testing, authentication and access-control checks, Supabase/PostgreSQL auditing, and evidence-based security reports.

Sentinel — Automated security assessment platform with local AI, CVE intelligence, and SOC monitoring. No API keys required.

Time-Based & Boolean Blind SQL Injection Testing Framework — v7.0.0

Stateless website privacy & security auditor. Scans for SSL/TLS encryption, cookies, trackers, and GDPR/ePrivacy compliance violations using Playwright.

CYRASEC is a multi-engine web vulnerability scanner that combines tools like dirsearch and nuclei, using AI-assisted analysis to detect, prioritize, and report web security issues efficiently in one streamlined workflow.

XSS Injection Scanner is an automated security testing tool designed to detect Cross-Site Scripting (XSS) vulnerabilities in web applications