Alternatives and similar repositories for joomscan:

Users that are interested in joomscan are comparing it to the libraries listed below

• dionach / CMSmap
  CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.
  ☆1,082Updated 3 years ago
• D35m0nd142 / LFISuite
  Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner
  ☆1,773Updated 2 years ago
• epsylon / xsser
  Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications…
  ☆1,278Updated 6 months ago
• SamJoan / droopescan
  A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.
  ☆1,322Updated last year
• codingo / VHostScan
  A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, al…
  ☆1,224Updated last year
• rajeshmajumdar / BruteXSS
  BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar …
  ☆525Updated 3 years ago
• wireghoul / dotdotpwn
  DotDotPwn - The Directory Traversal Fuzzer
  ☆1,032Updated 2 years ago
• 0xInfection / XSRFProbe
  The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
  ☆1,192Updated last month
• m4ll0k / Atlas
  Quick SQLMap Tamper Suggester
  ☆1,363Updated 2 years ago
• wagiro / BurpBounty
  Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…
  ☆1,714Updated 10 months ago
• 1N3 / BlackWidow
  A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
  ☆1,589Updated 4 months ago
• BlackArch / webshells
  Various webshells. We accept pull requests for additions to this collection.
  ☆912Updated last year
• x90skysn3k / brutespray
  Bruteforcing from various scanner output - Automatically attempts default creds on found services.
  ☆2,179Updated this week
• mandatoryprogrammer / xsshunter
  The XSS Hunter service - a portable version of XSSHunter.com
  ☆1,514Updated 2 years ago
• ssl / ezXSS
  ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
  ☆1,990Updated last week
• v3n0m-Scanner / V3n0M-Scanner
  Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
  ☆1,495Updated last year
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆528Updated 4 years ago
• Tuhinshubhra / CMSeeK
  CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs
  ☆2,385Updated 11 months ago
• swisskyrepo / SSRFmap
  Automatic SSRF fuzzer and exploitation tool
  ☆3,123Updated 3 weeks ago
• enjoiz / XXEinjector
  Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
  ☆1,606Updated 3 months ago
• immunIT / drupwn
  Drupal enumeration & exploitation tool
  ☆596Updated 4 years ago
• ztgrace / changeme
  A default credential scanner.
  ☆1,474Updated 3 years ago
• almandin / fuxploider
  File upload vulnerability scanner and exploitation tool.
  ☆3,180Updated last year
• CiscoCXSecurity / bbqsql
  SQL Injection Exploitation Tool
  ☆748Updated 6 years ago
• s0md3v / Bolt
  CSRF Scanner
  ☆560Updated 8 months ago
• hahwul / XSpear
  🔱 Powerfull XSS Scanning and Parameter analysis tool&gem
  ☆1,252Updated 2 years ago
• Ekultek / Zeus-Scanner
  Advanced reconnaissance utility
  ☆969Updated last year
• fwaeytens / dnsenum
  dnsenum is a perl script that enumerates DNS information
  ☆631Updated 5 years ago
• khalilbijjou / WAFNinja
  WAFNinja is a tool which contains two functions to attack Web Application Firewalls.
  ☆810Updated 7 years ago
• 1N3 / Goohak
  Automatically Launch Google Hacking Queries Against A Target Domain
  ☆722Updated last year