open-source-web-scanners
A GitHub list curated by psiinon (creator of OWASP ZAP) cataloging open-source web security scanners, ranked by GitHub/GitLab stars. Tools are grouped by category: general unknown-vulnerability scanners, known-vulnerability scanners, fuzzers, CMS-specific scanners, API scanners, and tools focused on specific vulnerability classes.
TL;DR Star-ranked curated list of open-source web security scanners across DAST, fuzzing, CMS, and API testing categories.
Related in AppSec
Flowise MCP Security Bypass Enables RCE
Inside an Oracle Database SQL Injection Attack | Huntress
OASIS
