CMS Scanner: Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues
☆1,086May 18, 2021Updated 5 years ago
Alternatives and similar repositories for CMSScan
Users that are interested in CMSScan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs☆2,594Jul 17, 2026Updated 3 months ago
- Drupal enumeration & exploitation tool☆617Nov 4, 2020Updated 5 years ago
- OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/☆1,196Sep 11, 2024Updated 2 years ago
- CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.☆1,184Dec 1, 2021Updated 4 years ago
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,818Apr 26, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- File upload vulnerability scanner and exploitation tool.☆3,340May 8, 2025Updated last year
- Free web-application vulnerability and version scanner☆575Sep 26, 2026Updated last month
- WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websit…☆9,830Updated this week
- A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.☆1,454Jan 19, 2024Updated 2 years ago
- A Tool for Domain Flyovers☆5,954May 22, 2022Updated 4 years ago
- Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.☆1,812Dec 1, 2024Updated last year
- Most advanced XSS scanner.☆15,238Apr 26, 2025Updated last year
- Automatic SSRF fuzzer and exploitation tool☆3,644Aug 10, 2026Updated 2 months ago
- A Ruby framework designed to aid in the penetration testing of WordPress systems.☆1,043Nov 24, 2019Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It …☆2,162Jun 7, 2023Updated 3 years ago
- Detect and bypass web application firewalls and protection systems☆2,933Aug 11, 2024Updated 2 years ago
- HTTP parameter discovery suite.☆6,436Feb 20, 2025Updated last year
- Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner☆1,973Apr 13, 2022Updated 4 years ago
- JShell - Get a JavaScript shell with XSS.☆530May 5, 2019Updated 7 years ago
- Find web directories without bruteforce☆2,007Oct 29, 2023Updated 3 years ago
- A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.☆1,909Sep 14, 2026Updated last month
- A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, al…☆1,314Aug 18, 2025Updated last year
- Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans☆582Sep 7, 2021Updated 5 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Automated NoSQL database enumeration and web application exploitation tool.☆3,369Oct 13, 2026Updated 3 weeks ago
- Quick SQLMap Tamper Suggester☆1,409Jul 18, 2022Updated 4 years ago
- Penetration Testing Platform☆1,346Jul 6, 2022Updated 4 years ago
- Advanced vulnerability scanning with Nmap NSE☆3,791Feb 6, 2026Updated 8 months ago
- Bypassing disabled exec functions in PHP (c) CRLF☆403Oct 2, 2020Updated 6 years ago
- ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.☆2,352Jul 8, 2026Updated 3 months ago
- ☆2,341Aug 26, 2026Updated 2 months ago
- JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool☆2,521Jan 21, 2020Updated 6 years ago
- A Powerful Subdomain Takeover Tool☆967Oct 17, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.☆182Jul 30, 2019Updated 7 years ago
- A Modern Orchestration Engine for Security☆6,637Oct 4, 2026Updated 3 weeks ago
- The Swiss Army knife for automated Web Application Testing☆2,384Jun 20, 2026Updated 4 months ago
- This tool can be used to brute discover GET and POST parameters☆1,395Aug 24, 2019Updated 7 years ago
- Generates permutations, alterations and mutations of subdomains and then resolves them☆2,511Jan 9, 2025Updated last year
- nodejsscan is a static security code scanner for Node.js applications.☆2,580Sep 21, 2026Updated last month
- WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.☆6,590Apr 19, 2026Updated 6 months ago