Awesome GitHub RepositoriesWeb Application Scanning

XSStrike is an automated security scanning engine designed for web application discovery, input

WPScan is a security analysis utility and vulnerability scanner designed specifically for auditing WordPress installations and other content management systems. It functions as a web application security tool that identifies misconfigurations, outdated software, and security holes in core installations, plugins, and themes. The tool employs black-box scanning techniques to perform site component enumeration, identifying users, themes, and plugins by matching known file paths and response signatures. It matches these detected components against a database of known security flaws to analyze the

Vulscan is a network service auditor and vulnerability scanner that utilizes the Nmap Scripting Engine to identify security flaws. It functions as a version-based flaw detector, matching detected software banners against an offline vulnerability database to identify potential security risks without requiring a constant internet connection. The tool provides mechanisms for refining identification accuracy, including an interactive mode for manual version overriding and configurable matching logic to filter results. It manages security data through a system for loading local datasets and synchr

A curated list of amazingly awesome Burp Extensions

Detect and bypass web application firewalls and protection systems

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

HackBar plugin for Burpsuite

A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.

OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

A Ruby framework designed to aid in the penetration testing of WordPress systems.

Wordpress Attack Suite

GyoiThon is a growing penetration test tool using Machine Learning.

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

A simple Wordpress scanner written in python based on the work of WPScan (Ruby version), some features are inspired by WPSeku.

Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.