Tools
WhatWeb
urbanadventurer/WhatWeb
WhatWeb is a next-generation web scanner that fingerprints websites, identifying CMSs, frameworks, servers, and version details using more than 1,800 plugins.
Topics
Related projects
owtf2kOWASP OWTF is a penetration-testing framework that unifies security tools behind a web UI and REST API, helping testers run standards-aligned web assessments and produce interactive reports.
mutillidae1.5kOWASP Mutillidae II is a deliberately vulnerable web application used as a hands-on target for learning and practicing web security in labs, classrooms, and CTFs.
wstg10.3kThe OWASP Web Security Testing Guide, a comprehensive open-source guide and framework for testing web application security.
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.
fscan14.8kFscan is an intranet comprehensive scanning tool that combines host discovery, port scanning, service fingerprinting, weak-password brute force, vulnerability detection and exploitation. It runs from the command line and can also be embedded as a Go SDK.
wpscan9.9kA WordPress security scanner that enumerates versions, plugins, themes and users while detecting known vulnerabilities.