CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs. It is designed to automate the process of detecting security flaws in the most popular Content Management Systems (CMS) such as WordPress, Joomla, Drupal, etc. It is a powerful tool for security professionals and penetration testers to identify potential security vulnerabilities in CMS installations.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A brute-force protection middleware for express routes that rate-limits incoming requests.
GuardDog is a CLI tool that identifies malicious PyPI and npm packages using heuristics-based analysis of source code and metadata.
A modular Python tool that obfuscates Android applications by manipulating decompiled smali code, resources, and manifest files without requiring source code access.
A technology lookup and lead generation tool that identifies the technology stack of any website and provides features for market research, competitor analysis, and data enrichment.
APKiD is a tool that identifies compilers, packers, obfuscators, and other weird stuff in APK files.
RiskInDroid is a machine learning-based tool that performs quantitative risk analysis of Android applications by reverse engineering bytecode and analyzing permission usage to generate numeric risk scores.
A Nuxt 3 security module that automatically implements OWASP security patterns through HTTP headers, middleware, and various protection mechanisms including CSP, XSS validation, CORS, and CSRF protection.
A PHP port of Rack::Honeypot, a spam trap that detects and blocks spambots
A deliberately vulnerable Java web application designed for educational purposes to teach web application security concepts and common vulnerabilities.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.