Browsing projects by Tag(s)

Select a tag to browse associated projects and drill deeper into the tag cloud.

Showing page 1 of 2

The OWASP Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to ... [More] penetration testing as well as being a useful addition to an experienced pen testers toolbox. [Less]

4.5
   
  0 reviews  |  4 users  |  451,438 lines of code  |  16 current contributors  |  Analyzed 7 days ago
 
 

Ronin is a Ruby platform for exploit development and security research. Ronin allows for the rapid development and distribution of code, exploits or payloads over many common Source-Code-Management (SCM) systems.

0
 
  0 reviews  |  2 users  |  32,091 lines of code  |  2 current contributors  |  Analyzed about 23 hours ago
 
 

WebSpidah is a tactical WASS (Web Application Security Scanner) written in PHP. It has an interactive shell as a user interface, much like the MSF, and a modularized, XML-based, vulnerability recon system. WebSpidah is released under the GPL license.

0
 
  0 reviews  |  1 user  |  1,306 lines of code  |  0 current contributors  |  Analyzed 2 days ago
 
 

httptype is a program that returns the http host software of a website. It is written in Perl.

0
 
  0 reviews  |  1 user  |  420 lines of code  |  0 current contributors  |  Analyzed 6 days ago
 
 

WebAppTools - the complex of programs and the knowledge base for the vulnerability analysis of the implementations and customizations of web-applications and web-servers. The given complex is intended for inventory and an security estimation of various (heterogeneous) web-applications. The ... [More] project is developed with usage of WebEngine kernel. The main target audience for the given system is the information security experts, system administrators, hosting-providers and the web-application developers. The project is opened for developers under condition of saving the "an open source" spirit. [Less]

5.0
 
  0 reviews  |  1 user  |  61,176 lines of code  |  0 current contributors  |  Analyzed 2 days ago
 
 

Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications.

0
 
  0 reviews  |  1 user  |  119,887 lines of code  |  3 current contributors  |  Analyzed 5 days ago
 
 
Compare

Vega is an open source platform to test the security of web applications. Vega can help you find and validate SQL Injections, Cross-Site Scripting (XSS), inadvertently disclosed sensitive information, and other vulnerabilities. It is written in Java, GUI based, and runs on Linux, OS X, and Windows. ... [More] Vega includes an automated scanner for quick tests and an intercepting proxy for tactical inspection. Vega can be extended using a powerful API in the language of the web: Javascript. Vega was developed by Subgraph in Montreal. [Less]

0
 
  0 reviews  |  1 user  |  44,744 lines of code  |  0 current contributors  |  Analyzed 5 days ago
 
 

This experimental Admin-Tool for the Content Management Systems WebsiteBaker or LEPTON CMS enable you to view the Bot-Trap Logfiles which are created by a special file of the Bot-Trap Project.

0
 
  0 reviews  |  1 user  |  1,113 lines of code  |  1 current contributor  |  Analyzed 5 days ago
 
 

fimap is a little python tool which can find, prepare, audit, exploit and even google automaticly for local and remote file inclusion bugs in webapps. fimap should be something like sqlmap just for LFI/RFI bugs instead of sql injection. It's currently under heavy development but it's usable. ... [More] The goal of fimap is to improve the quality and security of your website. Do not use this tool on servers where you don't have permission to pentest! I am dead serious. [Less]

0
 
  0 reviews  |  0 users  |  7,293 lines of code  |  3 current contributors  |  Analyzed 6 days ago
 
 

An automatic FTP indexer written in Python.

0
 
  0 reviews  |  0 users  |  1,560 lines of code  |  2 current contributors  |  Analyzed 3 days ago
 
 
 
 

Creative Commons License Copyright © 2013 Black Duck Software, Inc. and its contributors, Some Rights Reserved. Unless otherwise marked, this work is licensed under a Creative Commons Attribution 3.0 Unported License . Ohloh ® and the Ohloh logo are trademarks of Black Duck Software, Inc. in the United States and/or other jurisdictions. All other trademarks are the property of their respective holders.