w3af

—

Web application attack and audit framework.

PythonGPL-2.0

Open-source web vulnerability scanner with 200+ plugins. The veteran open alternative to commercial DAST suites.

Does

For