OWASP Juice Shop is an intentionally insecure web application written entirely in JavaScript which encompasses the entire range of OWASP Top Ten and other severe security flaws. Each packaged distribution includes some binaries for SQLite bound to the OS and node.js version which npm install was executed on.

OWASP Juice Shop -  Probably the most modern and sophisticated insecure web application

Detects file inclusion, sql injection, command execution vulnerabilities of a target Joomla! web site.  A regularly-updated signature-based scanner that can detect file inclusion, sql injection, command execution, XSS, DOS, directory traversal vulnerabilities of a target Joomla! web site.  It Searches known vulnerabilities of Joomla! and its components, Web application firewall detection and lot more. 

OWASP Joomla Vulnerability Scanner Project

IronWASP (Iron Web application Advanced Security testing Platform) is an open source system for web application vulnerability testing. It is designed to be customizable to the extent where users can create their own custom security scanners using it. Though an advanced user with Python/Ruby scripting expertise would be able to make full use of the platform, a lot of the tool's features are simple enough to be used by absolute beginners.

IronWASP - Iron Web application Advanced Security testing Platform

Wapiti allows you to audit the security of your web applications. It performs "black-box" scans, i.e. it does not study the source code of the application but will scans the webpages of the deployed webapp, looking for scripts and forms where it can inject data. Once it gets this list, Wapiti acts like a fuzzer, injecting payloads to see if a script is vulnerable. It is able to differentiate ponctual and permanent XSS vulnerabilities.
<BR><BR>
It can detect Cross site scripting, LDAP Injection, Database Injection, File Handling Errors and lot more.

Wapiti allows you to audit the security of your web applications. It performs "black-box" scans, i.e. it does not study the source code of the application but will scans the webpages of the deployed webapp, looking for scripts and forms where it can inject data. Once it gets this list, Wapiti acts like a fuzzer, injecting payloads to see if a script is vulnerable. It is able to differentiate ponctual and permanent XSS vulnerabilities.

Wapiti - Web application vulnerability scanner / security auditor

w3af is a Web Application Attack and Audit Framework. The project’s goal is to create a framework to help you secure your web applications by finding and exploiting all web application vulnerabilities. It can find Cross site scripting, SQL Injection and lot more. The framework implements web and proxy servers which are easy to integrate into your code in order to identify and exploit vulnerabilities.


w3af - Web Application Attack and Audit Framework

Discover open source projects across all platforms

Projects

OWASP Juice Shop - Probably the most modern and sophisticated insecure web application

OWASP Joomla Vulnerability Scanner Project

IronWASP - Iron Web application Advanced Security testing Platform

Wapiti - Web application vulnerability scanner / security auditor

w3af - Web Application Attack and Audit Framework

TechStack

Tagcloud

License

Suggested keywords:

Projects

OWASP Juice Shop - Probably the most modern and sophisticated insecure web application

OWASP Joomla Vulnerability Scanner Project

IronWASP - Iron Web application Advanced Security testing Platform

Wapiti - Web application vulnerability scanner / security auditor

w3af - Web Application Attack and Audit Framework

TechStack

Tagcloud

License