Security Scanning

Fast web fuzzer written in Go

WordPress security scanner for identifying vulnerabilities in WordPress websites.

A massive SQL injection vulnerability scanner

A proof-of-concept for an adaptive parallelised DNS prober

A next-generation network scanner for identifying security configuration weaknesses in devices like routers, firewalls, and switches.

Automate Google Hacking Database scraping and searching with Pagodo, a tool for finding vulnerabilities and sensitive information.

A Node.js tool that analyzes HTTP security headers on websites to identify missing or problematic security configurations.

A static analysis tool that detects Common Weakness Enumerations (CWEs) in ELF binaries across multiple CPU architectures using Ghidra-based disassembly and various analysis techniques.

Nmap is an essential network scanning tool used for network security auditing and status monitoring.

A command-line tool that scans websites to detect publicly known security vulnerabilities in frontend JavaScript libraries using Snyk's vulnerability database.

ssh-audit is a Python-based tool for auditing SSH server and client configurations to identify security weaknesses and ensure compliance with best practices.

A demonstration site for the Acunetix Web Vulnerability Scanner, featuring intentionally vulnerable PHP code to test web application security.

A tool that automatically audits website security by crawling an entire website and identifying vulnerabilities

A Ruby script that scans networks for vulnerable third-party web applications and front-ends with known exploitable security flaws.

A Docker MultiStage build implementation that integrates CVE scanning into Alpine Linux container builds using Docker 17.05's build-time vulnerability assessment capabilities.

SSLyze is a fast and powerful SSL/TLS scanning tool and Python library with a focus on speed, reliability, and ease of integration.

A free online tool that scans and fixes common security issues in WordPress websites.

CryptoLyzer is a cryptographic protocol analyzer that examines TLS, SSL, SSH, and DNSSEC server implementations with fingerprinting capabilities and multiple output formats.

Wfuzz is a tool designed for bruteforcing Web Applications with multiple features like multiple injection points, recursion, and payload combinations.

A tool for automated security scanning of web applications and manual penetration testing.

Mass IP port scanner for Internet-scale scanning with high speed and flexibility.

A next-generation web scanner that identifies websites and recognizes web technologies, including content management systems, blogging platforms, and more.