dast

Star

Here are 94 public repositories matching this topic...

Language:All

Filter by language

All94 Java18 Python17 JavaScript8 Go6 Shell5 Dockerfile4 HCL3 HTML2 Rust2 C1

Sort:Most stars

Sort options

Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

projectdiscovery /nuclei

Star22.5k

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

security vulnerability-detection hacktoberfest security-scanner vulnerability-assessment vulnerability-scanner dast attack-surface subdomain-takeover cve-scanner nuclei-engine

UpdatedMar 17, 2025
Go

zaproxy /zaproxy

Star13.3k

The ZAP by Checkmarx Core project

security zap appsec hacktoberfest security-scanner dast zaproxy zap-development

UpdatedMar 11, 2025
Java

analysis-tools-dev /dynamic-analysis

Sponsor

Star981

⚙️ A curated list of dynamic analysis tools and linters for all programming languages, binaries, and more.

analysis dynamic dynamic-analysis dast dynamic-code-analysis

UpdatedMar 10, 2025
Markdown

zaproxy /zap-extensions

Star862

ZAP Add-ons

security zap appsec hacktoberfest security-scanner dast zaproxy

UpdatedMar 13, 2025
HTML

zaproxy /community-scripts

Star816

A collection of ZAP scripts and tips provided by the community - pull requests very welcome!

scripts tips appsec webappsec dast zaproxy

UpdatedMar 3, 2025
JavaScript

alipay /ant-application-security-testing-benchmark

Star375

xAST评价体系，让安全工具不再“黑盒”. The xAST evaluation benchmark makes security tools no longer a "black box".

testing security application benchmark evaluation sca iast sast dast

UpdatedMar 4, 2025
Java

zaproxy /action-baseline

Star321

A GitHub Action for running the ZAP Baseline scan

security actions devsecops dast github-actions

UpdatedNov 21, 2024
JavaScript

mercedes-benz /sechub

Star299

SecHub provides a central API to test software with different security tools.

api client security build rest server continuous-integration orchestration k8s appsec vulnerability-scanners security-scanner secdevops sdlc security-automation security-tools security-testing sast dast sechub

UpdatedMar 17, 2025
Java

zaproxy /action-full-scan

Star297

A GitHub Action for running the ZAP Full scan

security actions devsecops dast github-actions

UpdatedNov 21, 2024
JavaScript

PortSwigger /dastardly-github-action

Star281

Runs a scan using Dastardly by Burp Suite against a target site and creates a JUnit XML report for the scan on completion.

automation security-tools devsecops dast

UpdatedJul 22, 2024
Dockerfile

we45 /ThreatPlaybook

Star278

A unified DevSecOps Framework that allows you to go from iterative, collaborative Threat Modeling to Application Security Test Orchestration

python application-security threat-model devsecops sast dast

UpdatedMar 13, 2025
Python

DenisPodgurskii /pentestkit

Star139

OWASP PTK - application security browser extension.

security jwt xss owasp xss-exploitation sqlinjection dast jwt-security commandinjection

UpdatedJan 28, 2025
JavaScript

karthikuj /sasori

Sponsor

Star134

Sasori is a dynamic web crawler powered by Puppeteer, designed for lightning-fast endpoint discovery.

security crawler automation dynamic scraping crawling infosec dast endpoint-discovery puppeteer

UpdatedJul 23, 2024
JavaScript

cerberauth /vulnapi

Star119

API Security Vulnerability Scanner designed to help you secure your APIs.

graphql security jwt authentication openapi authorization cybersecurity api-testing vulnerability-scanners security-scanner security-tools owasp-top-10 dast api-security api-security-testing

UpdatedMar 16, 2025
Go

hahwul /mzap

Sponsor

Star104

⚡️ Multiple target ZAP Scanning

security hacking bugbounty dast zaproxy zaproxy-automation

UpdatedNov 26, 2023
Go

secdec /attack-surface-detector-burp

Star101

The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters

security vulnerability pentesting dast

UpdatedDec 17, 2023
Java

Zigrin-Security /CakeFuzzer

Star99

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.

hacking cybersecurity iast sast dast