GyoiThon is a growing penetration test tool using Machine Learning.
Vulscan is a network service auditor and vulnerability scanner that utilizes the Nmap Scripting Engine to identify security flaws. It functions as a version-based flaw detector, matching detected software banners against an offline vulnerability database to identify potential security risks without requiring a constant internet connection. The tool provides mechanisms for refining identification accuracy, including an interactive mode for manual version overriding and configurable matching logic to filter results. It manages security data through a system for loading local datasets and synchr
WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
WhatWeb is a web application fingerprinting tool that identifies the technology stack powering a website by scanning HTTP responses and page content. It matches responses against a library of over 1800 signatures to detect CMS platforms, JavaScript libraries, web servers, embedded devices, and third-party addons, while also extracting technical metadata such as software versions, user accounts, and module names. The tool operates through a plugin-based detection framework that supports both passive and aggressive scanning modes. Passive plugins analyze existing HTTP headers and page content w
Detect and bypass web application firewalls and protection systems
The main features of ekultek/whatwaf are: Open Source Intelligence, Network and Web Reconnaissance, Web Application Scanning.
Open-source alternatives to ekultek/whatwaf include: urbanadventurer/whatweb — WhatWeb is a web application fingerprinting tool that identifies the technology stack powering a website by scanning… scipag/vulscan — Vulscan is a network service auditor and vulnerability scanner that utilizes the Nmap Scripting Engine to identify… enablesecurity/wafw00f — WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website. gyoisamurai/gyoithon — GyoiThon is a growing penetration test tool using Machine Learning. w-digital-scanner/w13scan — W13scan is an automated vulnerability assessment tool designed to identify security flaws in web applications through… yogeshojha/rengine — Rengine is an automated reconnaissance framework and vulnerability management platform designed for attack surface…