the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory ext…

Burp被动扫描流量转发插件

Web漏洞扫描工具XRAY的GUI启动器

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

SecHub provides a central API to test software with different security tools.

Turn your Burp suite into headless active web application vulnerability scanner

Owasp Orizon is a source code static analyzer tool designed to spot security issues in Java applications.

a vuln scanner powered by springboot and vue2

Delvelin is a Code Vulnerability Analyzer for Java and Kotlin that supports best practices in security and risk management.

A BurpSuite extension for vulnerability Scanning

JAVA Spring-Boot implementation of REST API for OpenVAS Security Vulnerability Scanner. REST API is using gvm-cli in order to communicate with OpenVAS

Mixeway Scanner is Spring Boot application which aggregate integration with number of OpenSource Vulnerability scanners - both SAST and DAST types

A ZAPROXY Add-on that allows testing of web application vulnerabilities by recording complex multi-step sequences. You can test applications that need to access pages in a specific order, such as shopping carts or registration of member information.

This is a Java program that exploits Spring Break vulnerability (CVE-2017-8046).

This is a Maven plugin developed to simplify the process of scanning Docker images for vulnerabilities using Trivy.

WARNING: This is a vulnerable application to test the exploit for the Spring Break vulnerability (CVE-2017-8046). Run it at your own risk!

Burp Extension for collaboration in Faraday

A vulnerability scanner designed for remote web server. Uses nmap and whatweb extensively

Mixeway Fortify SCA Rest API - custom build API that can execute source analyzer remotely via API Calls

Benchmarking Vulnerability Detection Tools for Web Services