webscanner 开源项目推荐（84 个）

bountyyfi /lonkero

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

yqcs /prismx

:: Prism X · Automated Enterprise Network Security Risk Detection and Vulnerability Scanning Tool / 棱镜 X · 自动化企业网络安全风险检测、漏洞扫描工具

SecNN /AiScan-N

AiScan-N 来了！这是一款基于人工智能驱动的Ai自动化网络安全（运维）工具，专注于网络安全评估、漏洞扫描、运维、应急响应、渗透测试自动化，Ai大模型工具集【CLI Agent】 ，Ai驱动的安全检测技术，提升安全测试（运维）效率，专为企业和个人用户打造，尤其适合初学者（小白）快速上手使用，让你轻松迈入智能安全攻防时代！适用场景 ：如（红队演练、CTF比赛、Web应用渗透测试、内网横向移动、密码破解与暴力攻击、流量分析与威胁检测、APT攻击模拟、漏洞赏金挑战等场景）🎥演示视频（文章中）：https://mp.weixin.qq.com/s/7lsUdbrxkDy4P5pZhEWv7Q

vulscanteam /vulscan

vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

WangYihang /SourceLeakHacker

🐛 A multi threads web application source leak scanner

akha-security /akca

AKCA Advanced Web Security Scanner

imiyoo2010 /teye_scanner_for_book

《白帽子讲Web扫描》书籍参考代码

AttackandDefenceSecurityLab /AD_WebScanner

AD工作室精心研发漏洞安全扫描器

SecNN /SecNN-Wiki

Wiki漏洞库管理系统&网络安全知识库-渗透测试常见漏洞知识库文档-该网站收集了Web应用层漏洞、中间件安全缺陷、系统配置不当、移动端（Android）安全问题、权限提升、RCE、网络设备及IOT安全。

Nabil-Official /N-WEB

WEB PENETRATION TESTING TOOL 💥

whiterabb17 /sifter

Sifter - All purpose penetration testing op-center

LyleMi /Saker

Flexible Penetrate Testing Auxiliary Suite

orleven /Hamster

Hamster是基于mitmproxy开发的异步被动扫描框架，基于http代理进行被动扫描，主要功能为重写数据包、签名、漏洞扫描、敏感参数收集等功能（开发中）。

xchopath /pathprober

Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once

Dc4ts /ChangeTower

ChangeTower is intended to help you watch changes in webpages and get notified of any changes written in Go

marcolivierbouch /dirbpy

This is the new version of dirb in python

blue0x1 /Arescan

Arescan is a powerful web directory discovery tool that helps you uncover hidden directories and links on any website. By performing a breadth-first search.

balbarak /scanx

Scanx allow you to control scanner and printer from web with any browsers

SirCryptic /cwv-scanner

This is a simple web application vulnerability scanner that checks if a given URL or IP address is vulnerable to 36 common web application security vulnerabilities. The tool is designed to help website owners and security researchers identify vulnerabilities in their web applications that can be exploited by attackers.

machine1337 /fast-scan

An Advanced tool to scan hundreds of IP's in Seconds for CVE's, Open Ports And Web Technologies.