47,133 repositories indexed
1–15 of 15 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Automatic SQL injection and database takeover tool
The ZAP by Checkmarx Core project
Web path scanner
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
w3af: web application attack and audit framework, the open source web vulnerability scanner.
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
The AI Agent for Cyber Security.
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
WebAppSec Content Security Policy
🔍A cutting edge context aware GraphQL API fuzzing tool!
Ziti SDK for Golang
Security training for the apps you actually ship. Open your browser and start hacking.
Agile Threat Modeling as Code