Back to m4ll0k/wascan
Projects sharing features with WAScan
30 open-source projects similar to m4ll0k/wascan, ranked by shared indexed features. Tags may describe platforms or build tools rather than the same primary purpose. Check each project’s use case, license, and deployment requirements before treating it as a replacement.
- wpscanteam/wpscan
wpscanteam/wpscan
9,636View on GitHubWPScan is a security analysis utility and vulnerability scanner designed specifically for auditing WordPress installations and other content management systems. It functions as a web application security tool that identifies misconfigurations, outdated software, and security holes in core installations, plugins, and themes. The tool employs black-box scanning techniques to perform site component enumeration, identifying users, themes, and plugins by matching known file paths and response signatures. It matches these detected components against a database of known security flaws to analyze the
Ruby - dionach/cmsmap
Dionach/CMSmap
1,166View on GitHubCMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.
Python - w-digital-scanner/w13scan
w-digital-scanner/w13scan
1,945View on GitHubW13scan is an automated vulnerability assessment tool designed to identify security flaws in web applications through a modular plugin architecture. It functions as a scanning engine that executes specialized security logic against web endpoints to detect injection flaws, information leaks, and configuration errors. The platform distinguishes itself by combining active probing with passive traffic analysis and out-of-band detection. It utilizes a callback-based service to verify blind vulnerabilities that do not provide immediate feedback, and it operates as a proxy to intercept and inspect l
Smartypassive-vulnerability-scannersecurity-tools - shieldfy/api-security-checklist
shieldfy/API-Security-Checklist
23,258View on GitHubThis project is a comprehensive API security audit checklist and vulnerability audit framework. It provides a structured guide of security countermeasures for designing, testing, and deploying secure APIs across various protocols. The framework includes specialized guides for securing OAuth 2.0 authorization flows, implementing zero trust networking for service-to-service communication, and protecting GraphQL endpoints from resource exhaustion and information leakage. It also provides standards for integrating static analysis, dynamic scanning, and secret detection into CI/CD delivery pipelin
apijwtoauth2
