OWASP Nettacker
Metrics as of , from the GitHub or GitLab API of each repository. Refreshed monthly.
What OWASP Nettacker is
OWASP Nettacker is a Python framework for automated penetration testing and information gathering. Each task, such as port scanning, subdomain enumeration, directory discovery, vulnerability checks or credential brute-forcing, is a separate module. Scans cover protocols including HTTP, HTTPS, FTP, SSH, SMB, SMTP, ICMP, TELNET and XML-RPC, and run multithreaded. Targets can be IPv4 addresses, IP ranges, CIDR blocks, domain names or URLs. It offers a CLI, a REST API and a web UI. Reports export as HTML, JSON, CSV or plain text. A built-in database keeps past scans so new hosts, ports or vulnerabilities can be detected, for example in CI/CD pipelines. A Docker image covers both CLI and web UI use.
Written from the project's README, read .
- Category
- Security testing
- License
- Apache-2.0
- Language
- Python
- Changelog
- Releases on GitHub
Repository metrics
Status
activeLast commit within 90 days of the fetch date.Computed from the last commit date and the archive flag on the fetch date. See the status rules.
Alternatives
Listed security testing tools, same primary language first, then by GitHub stars. Each line gives one fact from the tool's documentation where it differs from OWASP Nettacker's, with its source.
sqlmap: Scan targets: Web application parameters: GET, POST, cookie, User-Agent and Referer values. source: Docs: Features
garak: Scan targets: LLMs and dialog systems reached through generators. source: README
Bandit: Scan targets: Python code, for common security issues. source: README
RESTler: Scan targets: Cloud services through their REST APIs. source: README
Atheris: Scan targets: Python code and native extensions written for CPython. source: README
Trivy: Scan targets: Container images, filesystems, remote Git repositories, virtual machine images, Kubernetes. source: README
Nuclei: Scan targets: Target URLs and hosts, from a single target or a list file. source: README
Gitleaks: Scan targets: Secrets such as passwords, API keys and tokens in git repositories, files and stdin. source: README
Questions
Is OWASP Nettacker open source?
Yes. OWASP Nettacker is released under Apache-2.0, an OSI-approved license, as reported by the GitHub API on 2026-09-22.
Is OWASP Nettacker maintained?
On 2026-09-22, the last commit to the default branch was on 2026-09-22, so the listed status is active. Rule: Last commit within 90 days of the fetch date.
How many GitHub stars does OWASP Nettacker have?
5,612 stars on 2026-09-22, from the GitHub API. The number is refreshed at each monthly update.
What language is OWASP Nettacker written in?
The repository's primary language, as reported by the GitHub API, is Python.
Sources
- GitHub REST API: repository, read
- GitHub REST API: commits, read
- GitHub REST API: latest release, read
- GitHub REST API: contributors, read
- README, read