Tools
owtf
owtf/owtf
OWASP OWTF is a penetration-testing framework that unifies security tools behind a web UI and REST API, helping testers run standards-aligned web assessments and produce interactive reports.
Topics
Related projects
objection9.5kA Frida-powered runtime mobile exploration toolkit for assessing iOS and Android apps, with capabilities such as SSL pinning bypass, memory dumping, and heap object manipulation.
WhatWeb7kWhatWeb is a next-generation web scanner that fingerprints websites, identifying CMSs, frameworks, servers, and version details using more than 1,800 plugins.
django-DefectDojo5.2kDefectDojo is an open-source vulnerability management and ASPM platform. It ingests findings from many security scanners, then handles deduplication, tracking, remediation and reporting through a self-hosted web interface.
gotestwaf1.8kA Go-based security testing tool that generates malicious REST, GraphQL, gRPC and OWASP attack traffic to evaluate WAFs and API security products.
mitmproxy46.9kAn interactive TLS-capable intercepting HTTP proxy with console, command-line, and web interfaces, used by pentesters and developers for debugging and security testing.
fail2ban19kA daemon that scans log files for repeated authentication failures and bans offending hosts by updating system firewall rules.