Tools
wpscan
wpscanteam/wpscan
A WordPress security scanner that enumerates versions, plugins, themes and users while detecting known vulnerabilities.
Topics
Related projects
PHP-Antimalware-Scanner805A PHP malware scanner that checks projects and WordPress installs for malicious code, exploit patterns, and integrity changes, with optional AI-assisted review.
zaproxy16.2kZAP (Zed Attack Proxy) is a widely used open-source web application security scanner. It automatically finds vulnerabilities and supports manual penetration testing, offering a desktop GUI, headless automation and Docker deployment for developers and security testers.
fscan14.8kFscan is an intranet comprehensive scanning tool that combines host discovery, port scanning, service fingerprinting, weak-password brute force, vulnerability detection and exploitation. It runs from the command line and can also be embedded as a Go SDK.
bandit8.4kA security linter from PyCQA that inspects Python code via AST and plugins to find common security issues and produce reports.
tfsec7.1ktfsec is a static analysis scanner that detects misconfigurations in Terraform code across major cloud providers, with hundreds of built-in rules and easy CI integration.
WhatWeb7kWhatWeb is a next-generation web scanner that fingerprints websites, identifying CMSs, frameworks, servers, and version details using more than 1,800 plugins.