Cross-site scripting labs for web application security enthusiasts
#web-security tools
79 results
Important security headers for Fastify with granular control over application routes.
A low overhead rate limiter for your routes
Akamai App & API Protector is an integrated security solution that safeguards web applications and APIs against various cyber threats using edge computing and adaptive technologies.
A demonstration site for the Acunetix Web Vulnerability Scanner, intentionally vulnerable to various web-based attacks.
Airlock Secure Access Hub is an integrated security platform that combines identity and access management with web application and API protection to secure digital applications while mainta…
Amass by OWASP performs comprehensive attack surface mapping and asset discovery.
An application security testing solution that identifies vulnerabilities across web, mobile, and desktop applications throughout the development lifecycle.
An automated web application security scanner that evaluates JavaScript library vulnerabilities and HTTP security headers to assess website security posture.
BotScout.com provides proactive bot detection, screening, and banning through a powerful API.
A Dynamic Application Security Testing (DAST) platform that provides automated security testing for web applications, APIs, and LLM-powered applications throughout the software development…
A tool to find XSS vulnerabilities in web applications
Integrated platform for web application security testing
A web application security testing platform that combines manual and automated testing tools for conducting comprehensive security assessments and penetration testing.
A free and open-source deliberately insecure web application for security enthusiasts, developers, and students to discover and prevent web vulnerabilities.
A lightweight web security auditing toolkit that simplifies security tasks and enhances productivity.
Fast and simple way to check any HTTP Headers
An API security and monitoring platform that automatically discovers, validates, and protects API endpoints while providing comprehensive management and analytics capabilities.
A multi-threaded scanner for identifying CORS flaws and misconfigurations
A simple web crawler written in Go
A browser with XSS detection capabilities
Dalfox is a powerful open-source XSS scanner and utility focused on automation.
A deliberately vulnerable modern day app with lots of DOM related bugs
A multi-threaded Java application designed to brute force directories and filenames on web servers, helping identify hidden content and potential attack vectors. Free and included in Kali L…
Load more tools
Showing 24 of 79