1.sqlmapproject / sqlmapAutomatic SQL injection and database takeover toolsql-injectiondetectionexploitationpythondatabasepentesting+9 morePythonOther license39K total6.4K forks+859 starsfrom 37,970 · score 6.76
2.maurosoria / dirsearchWeb path scannerfuzzerfuzzingpythonsecuritydirsearchhacking+14 morePythonNo license15K total2.5K forks+529 starsfrom 14,504 · score 6.27
3.cider-security-research / cicd-goatA deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.appseccicddevopsinfosecdevsecopssecurity+3 morePythonAPACHE-2.02.3K total434 forks+50 starsfrom 2,277 · score 3.93
4.andresriancho / w3afw3af: web application attack and audit framework, the open source web vulnerability scanner.scannersecurityappseccross-site-scriptingsql-injectionPythonNo license4.9K total1.2K forks+26 starsfrom 4,886 · score 3.30
5.omar2535 / GraphQLer🔍A cutting edge context aware GraphQL API fuzzing tool!api-testing-frameworkgraphqlapiautomated-testingcybersecuritypentesting+3 morePythonMIT174 total17 forks+5 starsfrom 169 · score 1.79