A modern, console-based web penetration testing toolkit with a TUI. Features an HTTP/HTTPS proxy, active/passive vulnerability scanner, Repeater, Intruder, Spider, and more. Free & open-source.
-
Updated
Oct 5, 2026 - Python
A modern, console-based web penetration testing toolkit with a TUI. Features an HTTP/HTTPS proxy, active/passive vulnerability scanner, Repeater, Intruder, Spider, and more. Free & open-source.
URLUNIQ 2.0 is an advanced offline URL normalization, canonicalization, deduplication, classification, filtering, analysis, and reporting toolkit built for security researchers, bug bounty hunters, and large URL datasets.
S.H.O.A.V. : a deterministic-core AI bodyguard that shields autonomous web agents from clickjacking, dark patterns and hidden prompt injection. Built on Auto Browser for any CLI-capable agent. Genesis Hackathon 2026, Track 03.
An automated SQL injection testing to uncover backend database vulnerabilities
Amba2Pen is a Python-based tool designed to streamline the penetration testing process by automating various pentest tasks.
Air-gapped LLM-assisted web application pentest triage — Burp Suite extension + local Ollama + ChromaDB semantic memory. MIT licensed.
XSS Injection Scanner is an automated security testing tool designed to detect Cross-Site Scripting (XSS) vulnerabilities in web applications
To associate your repository with the web-security-tool topic, visit your repo's landing page and select "manage topics."