ZAP by Checkmarx - Open-source web application security scanner maintained by the ZAP Core Team. Fray - Open-source WAF bypass and security-testing toolkit with 6,300+ payloads across OWASP categories ...