andresriancho/w3af
w3af: web application attack and audit framework, the open source web vulnerability scanner. observed · 2026-08-28
Health v2 · maintenance only
23/100
- Activity 0
- Release rhythm 8
- Longevity 100
Flags: no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 5481
- days_rel: n/a
- days_push: 1288
- n_releases_24m: 0
Adoption not part of the score
4900 stars · 1238 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
w3af is an open source web application attack and audit framework that scans web applications for over 200 vulnerability types, including XSS, SQL injection, and OS commanding. It is written in Python and used by developers and penetration testers to identify and exploit web vulnerabilities.
Use cases
- scan a web application for sql injection
- find cross-site scripting vulnerabilities in my site
- audit web app security before a pentest
- automated web vulnerability assessment
- detect os commanding flaws in web apps
When to choose
- you need a scriptable, plugin-based open source web vulnerability scanner
- you want to identify and exploit common web app flaws like XSS and SQLi
- you prefer a Python-based tool you can extend
When to avoid
- you need actively maintained tooling with recent updates and support
- you want a modern GUI-driven DAST product
- you need API or microservices security testing rather than classic web app scanning
Facets
cli-tool · maturity maintenance
penetration-testing vulnerability-scanning security security penetration-testing web-development python cli web-application-scanner appsec xss sql-injection exploit-framework linux macos
1 source
- readme: https://github.com/andresriancho/w3af · fetched 2026-08-28 · 3640b251a329
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| andresriancho/w3af | main | 23 |
For agents
markdown · JSON · MCP: product_card(name="andresriancho/w3af")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem