vapt-framework

Professional CMS security assessment tool for authorized penetration testing. Supports WordPress, Joomla, and Drupal with passive/active/full scan modes. CMS Recon & Vulnerability Scanner by Saket Pandey

6-day black-box web application and API security assessment of DVGA, following OWASP WSTG and OWASP API Security Top 10 methodologies. Identified and validated 13 security findings across authentication, authorization, GraphQL/API security, and injection attack surfaces, supported by evidence and professional VAPT reporting.

Quasar by Th3BlackHol3 is a Python-based command-line framework that orchestrates subdomain discovery tools, consolidates and validates their results, removes duplicates, and checks discovered hostnames for responsive HTTP/HTTPS services. It is designed for authorized penetration testing, bug bounty reconnaissance, and attack-surface management.

A Cyber Security Reseach tool created to help ship better and complete products.

PivotCheck is an offensive-security decision-support and pivot-validation framework for authorized Red-Team and Penetration-Testing engagements.

This repository contains a Django-based API for performing basic vulnerability assessments on target web applications.