Open-source alternatives to WPForce

Detect and bypass web application firewalls and protection systems

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

GyoiThon is a growing penetration test tool using Machine Learning.

A Ruby framework designed to aid in the penetration testing of WordPress systems.

OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/

XSStrike is an automated security scanning engine designed for web application discovery, input

Vulscan is a network service auditor and vulnerability scanner that utilizes the Nmap Scripting Engine to identify security flaws. It functions as a version-based flaw detector, matching detected software banners against an offline vulnerability database to identify potential security risks without requiring a constant internet connection. The tool provides mechanisms for refining identification accuracy, including an interactive mode for manual version overriding and configurable matching logic to filter results. It manages security data through a system for loading local datasets and synchr

A curated list of amazingly awesome Burp Extensions

A simple Wordpress scanner written in python based on the work of WPScan (Ruby version), some features are inspired by WPSeku.

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

WPScan is a security analysis utility and vulnerability scanner designed specifically for auditing WordPress installations and other content management systems. It functions as a web application security tool that identifies misconfigurations, outdated software, and security holes in core installations, plugins, and themes. The tool employs black-box scanning techniques to perform site component enumeration, identifying users, themes, and plugins by matching known file paths and response signatures. It matches these detected components against a database of known security flaws to analyze the

Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.