Awesome Open Source
Awesome Open Source
Combined Topics
vulnerability-assessment x
Advertising 📦 9
All Projects
Application Programming Interfaces 📦 120
Applications 📦 181
Artificial Intelligence 📦 72
Blockchain 📦 70
Build Tools 📦 111
Cloud Computing 📦 79
Code Quality 📦 28
Collaboration 📦 30
Command Line Interface 📦 48
Community 📦 81
Companies 📦 60
Compilers 📦 60
Computer Science 📦 74
Configuration Management 📦 39
Content Management 📦 167
Control Flow 📦 197
Data Formats 📦 77
Data Processing 📦 266
Data Storage 📦 132
Economics 📦 60
Frameworks 📦 198
Games 📦 122
Graphics 📦 103
Hardware 📦 148
Integrated Development Environments 📦 47
Learning Resources 📦 147
Legal 📦 28
Libraries 📦 119
Lists Of Projects 📦 21
Machine Learning 📦 336
Mapping 📦 61
Marketing 📦 15
Mathematics 📦 55
Media 📦 228
Messaging 📦 97
Networking 📦 304
Operating Systems 📦 84
Operations 📦 120
Package Managers 📦 52
Programming Languages 📦 229
Runtime Environments 📦 96
Science 📦 42
Security 📦 375
Social Media 📦 26
Software Architecture 📦 70
Software Development 📦 68
Software Performance 📦 57
Software Quality 📦 127
Text Editors 📦 45
Text Processing 📦 131
User Interface 📦 310
User Interface Components 📦 465
Version Control 📦 29
Virtualization 📦 68
Web Browsers 📦 38
Web Servers 📦 25
Web User Interface 📦 194

The Top 86 Vulnerability Assessment Open Source Projects on Github

Categories > Security > Vulnerability Assessment
H4cker ⭐ 10,083
This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.
Lynis ⭐ 8,734
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Vuls ⭐ 8,689
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Nuclei ⭐ 5,246
Fast and customizable vulnerability scanner based on simple YAML based DSL.
Wstg ⭐ 3,583
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
Xunfeng ⭐ 2,946
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
Raccoon ⭐ 2,145
A high performance offensive security tool for reconnaissance and vulnerability scanning
Vulscan ⭐ 2,069
Advanced vulnerability scanning with Nmap NSE
Archerysec ⭐ 1,737
Centralize Vulnerability Assessment and Management for DevSecOps Team
Cve Search ⭐ 1,720
cve-search - a tool to perform local searches for known vulnerabilities
Openvas Scanner ⭐ 1,317
This repository contains the scanner component for Greenbone Vulnerability Management (GVM). If you are looking for the whole OpenVAS framework please take a look at https://community.greenbone.net/t/frequently-asked-questions-faq/5558.
Vulnx ⭐ 1,273
vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.
Secure Ios App Dev ⭐ 1,241
Collection of the most common vulnerabilities found in iOS applications
Xattacker ⭐ 988
X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
Rapidscan ⭐ 896
🆕 The Multi-Tool Web Vulnerability Scanner.
Jackhammer ⭐ 599
Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.
Hellraiser ⭐ 453
Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.
Vanquish ⭐ 422
Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.
Securitymanageframwork ⭐ 383
Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.
Watchdog ⭐ 309
Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.
Celerystalk ⭐ 294
An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.
Hackerenv ⭐ 274
Vulnfanatic ⭐ 196
A Binary Ninja plugin for vulnerability research.
Rebel Framework ⭐ 160
Advanced and easy to use penetration testing framework 💣🔎
Vulnrepo ⭐ 148
VULNRΞPO - Free vulnerability report generator and repository end-to-end encrypted. Complete templates of issues, CWE, CVE, MITRE ATT&CK, PCI DSS, AES encryption, Nmap/Nessus/Burp/OpenVAS issues import, Jira export, TXT/HTML/PDF report, attachments, automatic changelog, statistics, vulnerability management, Security report builder.
Portauthority ⭐ 145
API that leverages Clair to scan Docker Registries and Kubernetes Clusters for vulnerabilities
Gsa ⭐ 141
Greenbone Security Assistant - The web frontend for the Greenbone Vulnerability Management (GVM) framework
Nerve ⭐ 140
NERVE Continuous Vulnerability Scanner
Bulwark ⭐ 131
An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.
Gvm Tools ⭐ 109
Remote control your Greenbone Vulnerability Manager (GVM)
Vailyn ⭐ 109
A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python
Minions ⭐ 95
Distributed filesystem scanner
Intrigue Ident ⭐ 82
Application and Service Fingerprinting
Purify ⭐ 76
All-in-one tool for managing vulnerability reports from AppSec pipelines
Httprecon Nse ⭐ 67
Advanced web server fingerprinting for Nmap
Unsafe_bank ⭐ 60
Vulnerable Banking Suite
Security Assessment ⭐ 44
Scripts to automate some part of Security/Vulnerability Assessment
Local File Disclosure Sql Injection Lab ⭐ 40
This is sample code to demonstrate how one can use SQL Injection vulnerability to download local file from server in specific condition. If you have any doubt, ping me at https://twitter.com/IndiShell1046 :)
Www Project Zap ⭐ 37
OWASP Zed Attack Proxy project landing page.
Jwtweak ⭐ 35
Detects the algorithm of input JWT Token and provide options to generate the new JWT token based on the user selected algorithm.
Scout ⭐ 32
Scout - a Contactless Active Reconnaissance Tool
Vulmap Windows ⭐ 32
Host-based local vulnerability scanner. Finds installed software on the host, asks their vulnerabilities to vulmon.com API and print vulnerabilities with available exploits. All found exploits can be downloaded by Vulmap.
Lava ⭐ 30
Microsoft Azure Exploitation Framework
Munch ⭐ 28
Greybox fuzzer for optimizing function coverage and finding low-level vulnerabilities in C programs
Nessusbeat ⭐ 26
A Beat that monitors a local Nessus reports directory and outputs scan results to Elasticsearch or Logstash.
Aeacus ⭐ 26
🔐 Vulnerability remediation scoring system
Erebus ⭐ 23
Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.
Powerexploit ⭐ 16
Post-Exploitation 😎 module for Penetration Tester and Hackers.
Attacktoolkit ⭐ 13
Open-source Exploiting Framework
Libellux Up And Running ⭐ 11
Libellux: Up and Running is a collection of personal notes and documentation regarding open-source software configuration. The focus is to build a so called Zero Trust Network using a central authentication server to enhance the security for our existing applications. We will manage our network using an open-source software tool for provisioning and configuration management to automate and speed up productivity.
Deepscan ⭐ 11
A simple shell script which utilizes nmap, nikto, dirb, enum4linux and other open source goodies to automate enumeration process.
Thexframework ⭐ 10
Network/WebApplication Information Gathering, Enumeration and Vulnerability Scanning (Under Development)
Iotvas Nmap ⭐ 10
This is a NSE script that uses IoTVAS API and enables NMAP port scanner to perform connected device discovery and security risk assessment
Khata ⭐ 9
WebHook for Red Team
Xattacker ⭐ 9
X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
Httprecon Win32 ⭐ 9
Advanced web server fingerprinting
Random Serial Generator ⭐ 8
Generates Random Serials
Avmp ⭐ 8
A collection of tools for managing and automating vulnerability management.
Nmapcli ⭐ 7
nmapcli is a tool written in Python with pre-defined scan templates to automate Nmap scans
Security Bugtracker ⭐ 5
Run security test tools and track bugs easily
Carbontoolkit ⭐ 5
Automated tool for information gathering and vulnerability assessment
References ⭐ 5
Collection of reusable references
Nuclei Plugin ⭐ 5
Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.
Vise ⭐ 4
A search engine on information delivered by OSINT sources to support Vulnerability Assessment
Hyperion ⭐ 4
Future GVM Architecture
Splunk Vulners ⭐ 3
Splunk Vulnerability Assessment Plugin
Motan ⭐ 3
motan (mobile application static analysis) is a platform agnostic and easily extensible modular tool for performing static security assessments of mobile applications. It can analyze both Android (apk) and iOS (ipa) applications.
Pi Pwner ⭐ 3
Pentesting Suite Deployer for Raspbian Stretch
Zap Cicd Integration ⭐ 2
A python script which is designed to integrate vulnerability assessment capabilities using OWASP Zed Attack Proxy (ZAP) into CI/CD platforms and pipelines
Sleepy Duck ⭐ 2
Sleepy-Duck is an open source project created for automated security testing on application level. It can be used as an educational script to start learning about cyber-security as well as a common tool for vulnerability assessment.
Deep Security Smart Check Scan Action ⭐ 2
🔍 For scanning your images as part of your CI pipeline using Cloud One Container Security (Formerly Deep Security Smart Check)
Ansvif_android ⭐ 2
An Android frontend for ansvif fuzzing
Vulnerabilitysight ⭐ 2
Vulnerabilities management solution
Vaa ⭐ 2
Source code for COLING 2020 paper "Enhancing Neural Models with Asymmetrical Vulnerability via Adversarial Attack"
Firestorepwn ⭐ 2
fsp - Firestore Database Vulnerability Scanner Using APKs
Tutorials ⭐ 2
Easy way to automate the complex task
Nvd Feed ⭐ 2
This repository provides CVE vulnerability download using NVD feeds
Iotvas Rapid7 ⭐ 2
This application demonstrates IoTVAS device discovery and security assessment API integration with the Rapid7 InsightVM.
Awss ⭐ 1
AWSS (AUTOMATED WEB SOFTWARE SECURITY) | A NOVEL OPEN SOURCE WEB SECURITY SCANNER
Rand Notes ⭐ 1
Random Notes - No Source Code
Rscap ⭐ 1
rSCAP is a standardized compliance checking solution and auditing script used with Redhat based Linux systems.
Sleepy Duck ⭐ 1
Sleepy-Duck is an open source project created for automated security testing on application level. It can be used as an educational script to start learning about cyber-security as well as a common tool for vulnerability assessment.
Unknownvpn ⭐ 1
Documentation from me and my team's audit on UnknownVPN
Asst ⭐ 1
OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.
Powertrain ⭐ 1
A report generator for producing vulnerability assessment reports. Currently running on GAE...uses Flask and Python3 in the standard environment
Pevat ⭐ 1
Process Event Vulnerability Assessment Tool
1-86 of 86 projects
Advertising 📦 9
All Projects
Application Programming Interfaces 📦 120
Applications 📦 181
Artificial Intelligence 📦 72
Blockchain 📦 70
Build Tools 📦 111
Cloud Computing 📦 79
Code Quality 📦 28
Collaboration 📦 30
Command Line Interface 📦 48
Community 📦 81
Companies 📦 60
Compilers 📦 60
Computer Science 📦 74
Configuration Management 📦 39
Content Management 📦 167
Control Flow 📦 197
Data Formats 📦 77
Data Processing 📦 266
Data Storage 📦 132
Economics 📦 60
Frameworks 📦 198
Games 📦 122
Graphics 📦 103
Hardware 📦 148
Integrated Development Environments 📦 47
Learning Resources 📦 147
Legal 📦 28
Libraries 📦 119
Lists Of Projects 📦 21
Machine Learning 📦 336
Mapping 📦 61
Marketing 📦 15
Mathematics 📦 55
Media 📦 228
Messaging 📦 97
Networking 📦 304
Operating Systems 📦 84
Operations 📦 120
Package Managers 📦 52
Programming Languages 📦 229
Runtime Environments 📦 96
Science 📦 42
Security 📦 375
Social Media 📦 26
Software Architecture 📦 70
Software Development 📦 68
Software Performance 📦 57
Software Quality 📦 127
Text Editors 📦 45
Text Processing 📦 131
User Interface 📦 310
User Interface Components 📦 465
Version Control 📦 29
Virtualization 📦 68
Web Browsers 📦 38
Web Servers 📦 25
Web User Interface 📦 194
"GitHub" is a registered trademark of GitHub, Inc. Awesome Open Source is not affiliated with GitHub.

All non readme contents or Github based topics or project metadata copyright Awesome Open Source 2018-2021