1.sqlmapproject / sqlmapAutomatic SQL injection and database takeover toolsql-injectiondetectionexploitationpythondatabasepentesting+9 morePythonOther license39K total6.4K forks+1,809 starsfrom 37,020 · score 7.50
2.maurosoria / dirsearchWeb path scannerfuzzerfuzzingpythonsecuritydirsearchhacking+14 morePythonNo license15K total2.5K forks+903 starsfrom 14,130 · score 6.81
3.cider-security-research / cicd-goatA deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.appseccicddevopsinfosecdevsecopssecurity+3 morePythonAPACHE-2.02.3K total434 forks+114 starsfrom 2,213 · score 4.74
4.andresriancho / w3afw3af: web application attack and audit framework, the open source web vulnerability scanner.scannersecurityappseccross-site-scriptingsql-injectionPythonNo license4.9K total1.2K forks+78 starsfrom 4,834 · score 4.37
5.omar2535 / GraphQLer🔍A cutting edge context aware GraphQL API fuzzing tool!api-testing-frameworkgraphqlapiautomated-testingcybersecuritypentesting+3 morePythonMIT174 total17 forks+11 starsfrom 163 · score 2.48