How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Is this app legit? Check before you connect. Free URL security scanner for indie developers and AI builders. Live at trustscanpro.com
The main features of undeadlist/trust-scan are: Vulnerability Auditing, Web Security Testing.
Projects with overlapping indexed features include: lirantal/is-website-vulnerable — finds publicly known security vulnerabilities in a website's frontend JavaScript libraries. ultimatehackers/xsstrike — XSStrike is a security tool designed to detect cross-site scripting vulnerabilities through parameter fuzzing and web… zaproxy/zaproxy — OWASP ZAP is a dynamic application security testing tool and intercepting HTTP proxy used to find vulnerabilities in… epi052/feroxbuster — Feroxbuster is an HTTP directory brute forcer and web resource enumerator designed to discover hidden files and… shieldfy/api-security-checklist — This project is a comprehensive API security audit checklist and vulnerability audit framework. It provides a… danielmiessler/seclists — SecLists is a centralized library of security assessment data designed to support vulnerability discovery and…
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
XSStrike is a security tool designed to detect cross-site scripting vulnerabilities through parameter fuzzing and web response analysis. It functions as a web application fuzzer and vulnerability scanner that identifies injection points and security flaws. The project includes a specialized utility for detecting blind XSS, where payloads execute asynchronously or on separate pages. It also features a JavaScript library auditor to identify outdated libraries with known vulnerabilities and a dedicated tool for identifying and bypassing web application firewalls using various evasion techniques.
This project is a comprehensive API security audit checklist and vulnerability audit framework. It provides a structured guide of security countermeasures for designing, testing, and deploying secure APIs across various protocols. The framework includes specialized guides for securing OAuth 2.0 authorization flows, implementing zero trust networking for service-to-service communication, and protecting GraphQL endpoints from resource exhaustion and information leakage. It also provides standards for integrating static analysis, dynamic scanning, and secret detection into CI/CD delivery pipelin
Feroxbuster is an HTTP directory brute forcer and web resource enumerator designed to discover hidden files and directories on web servers. It functions as a recursive URL scanner that identifies unlinked endpoints and API resources by combining wordlist-based scanning with automated crawling. The tool operates as a proxy-aware fuzzer, allowing network requests to be routed through HTTP or SOCKS proxies for traffic interception or anonymity. It utilizes recursive directory crawling to automatically queue discovered paths and find nested content. The system includes capabilities for discovery