1.sqlmapproject / sqlmapAutomatic SQL injection and database takeover toolsql-injectiondetectionexploitationpythondatabasepentesting+9 morePythonOther license39K total6.4K forks+274 starsfrom 38,555 · score 5.62
2.maurosoria / dirsearchWeb path scannerfuzzerfuzzingpythonsecuritydirsearchhacking+14 morePythonNo license15K total2.5K forks+133 starsfrom 14,900 · score 4.90
3.cider-security-research / cicd-goatA deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.appseccicddevopsinfosecdevsecopssecurity+3 morePythonAPACHE-2.02.3K total434 forks+12 starsfrom 2,315 · score 2.56
4.andresriancho / w3afw3af: web application attack and audit framework, the open source web vulnerability scanner.scannersecurityappseccross-site-scriptingsql-injectionPythonNo license4.9K total1.2K forks+5 starsfrom 4,907 · score 1.79
5.omar2535 / GraphQLer🔍A cutting edge context aware GraphQL API fuzzing tool!api-testing-frameworkgraphqlapiautomated-testingcybersecuritypentesting+3 morePythonMIT174 total17 forks+3 starsfrom 171 · score 1.39