The Top 91 Vulnerability Scanners Open Source Projects

Awesome Open Source

Awesome Open Source

Combined Topics

vulnerability-scanners x

Advertising 📦 10

Application Programming Interfaces 📦 124

Applications 📦 192

Artificial Intelligence 📦 78

Blockchain 📦 73

Build Tools 📦 113

Cloud Computing 📦 80

Code Quality 📦 28

Collaboration 📦 32

Command Line Interface 📦 49

Community 📦 83

Companies 📦 60

Compilers 📦 63

Computer Science 📦 80

Configuration Management 📦 42

Content Management 📦 175

Control Flow 📦 213

Data Formats 📦 78

Data Processing 📦 276

Data Storage 📦 135

Economics 📦 64

Frameworks 📦 215

Graphics 📦 110

Hardware 📦 152

Integrated Development Environments 📦 49

Learning Resources 📦 166

Libraries 📦 129

Lists Of Projects 📦 22

Machine Learning 📦 347

Mapping 📦 64

Marketing 📦 15

Mathematics 📦 55

Messaging 📦 98

Networking 📦 315

Operating Systems 📦 89

Operations 📦 121

Package Managers 📦 55

Programming Languages 📦 245

Runtime Environments 📦 100

Science 📦 42

Security 📦 396

Social Media 📦 27

Software Architecture 📦 72

Software Development 📦 72

Software Performance 📦 58

Software Quality 📦 133

Text Editors 📦 49

Text Processing 📦 136

User Interface 📦 330

User Interface Components 📦 514

Version Control 📦 30

Virtualization 📦 71

Web Browsers 📦 42

Web Servers 📦 26

Web User Interface 📦 210

The Top 91 Vulnerability Scanners Open Source Projects

Categories > Security > Vulnerability Scanners

H4cker ⭐ 9,290

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Lynis ⭐ 8,347

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Trivy ⭐ 6,998

A Simple and Comprehensive Vulnerability Scanner for Container Images, Git Repositories and Filesystems. Suitable for CI

Scanners Box ⭐ 5,192

A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

Xunfeng ⭐ 2,981

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Faraday ⭐ 2,946

Collaborative Penetration Test and Vulnerability Management Platform

Nginx Ultimate Bad Bot Blocker ⭐ 1,999

Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders

Vulscan ⭐ 1,958

Advanced vulnerability scanning with Nmap NSE

Gda Android Reversing Tool ⭐ 1,491

GDA is a new fast and powerful decompiler in C++(working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

Struts Scan ⭐ 1,270

Python2编写的struts2漏洞全版本检测和利用工具

Angelsword ⭐ 1,237

Python3编写的CMS漏洞检测框架

Openvas Scanner ⭐ 1,101

This repository contains the scanner component for Greenbone Vulnerability Management (GVM). If you are looking for the whole OpenVAS framework please take a look at https://community.greenbone.net/t/frequently-asked-questions-faq/5558.

Intrigue Core ⭐ 1,021

Discover Your Attack Surface!

Nettacker ⭐ 1,005

Automated Penetration Testing Framework

Safety checks your installed dependencies for known security vulnerabilities

Secretscanner ⭐ 990

Find secrets and passwords in container images and file systems

Whitewidow ⭐ 928

SQL Vulnerability Scanner

V3n0m Scanner ⭐ 859

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

The Correlated CVE Vulnerability And Threat Intelligence Database API

Advanced dork Search & Mass Exploit Scanner

Rapidscan ⭐ 813

🆕 The Multi-Tool Web Vulnerability Scanner.

Open-Source Security Architecture | 开源安全架构

Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架

Zeus Scanner ⭐ 709

Advanced reconnaissance utility

Clair Scanner ⭐ 688

Docker containers vulnerability scan

Joomscan ⭐ 656

OWASP Joomla Vulnerability Scanner Project

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

Jackhammer ⭐ 641

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

Passive Scan Client ⭐ 624

Burp被动扫描流量转发插件

Corscanner ⭐ 619

Fast CORS misconfiguration vulnerabilities scanner🍻

Robber is open source tool for finding executables prone to DLL hijacking

Satansword ⭐ 543

红队综合渗透框架

Hack Tools ⭐ 508

Awvs Decode ⭐ 495

The best and easiest way to decode and repack AWVS scripts. AWVS 最好、最简单、最新的解码/再打包方法，仅15行代码！

Vulscan ⭐ 486

vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

Wordpresscan ⭐ 463

WPScan rewritten in Python + some WPSeku ideas

Vanquish ⭐ 452

Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.

Apache Ultimate Bad Bot Blocker ⭐ 448

Apache Block Bad Bots, (Referer) Spam Referrer Blocker, Vulnerability Scanners, Malware, Adware, Ransomware, Malicious Sites, Wordpress Theme Detectors and Fail2Ban Jail for Repeat Offenders

Hellraiser ⭐ 423

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

Hacking ⭐ 419

hacker, ready for more of our story ! 🚀

Securitymanageframwork ⭐ 380

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

Patrowlmanager ⭐ 376

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Celerystalk ⭐ 339

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

Iblessing ⭐ 338

iblessing is an iOS security exploiting toolkit, it mainly includes application information collection, static analysis and dynamic analysis. It can be used for reverse engineering, binary analysis and vulnerability mining.

Go Dork ⭐ 323

The fastest dork scanner written in Go.

Web-based Source Code Vulnerability Scanner

Hackerenv ⭐ 315

OWASP VBScan is a Black Box vBulletin Vulnerability Scanner

NERVE Continuous Vulnerability Scanner

Shiro_exploit ⭐ 269

Apache Shiro 反序列化漏洞检测与利用工具

Salt Scanner ⭐ 261

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

Ary 是一个集成类工具，主要用于调用各种安全工具，从而形成便捷的一键式渗透。

Insectsawake ⭐ 252

Network Vulnerability Scanner

Dr_checker ⭐ 251

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers

Saucerframe ⭐ 250

python3批量poc检测工具

Sec Admin ⭐ 235

分布式资产安全扫描核心管理系统(弱口令扫描，漏洞扫描)

Progpilot ⭐ 230

A static analysis tool for security

Angularjs Csti Scanner ⭐ 219

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS.

Grinder ⭐ 214

🔎 Python framework to automatically discover and enumerate hosts from different back-end systems (Shodan, Censys)

Linux post exploitation privilege escalation enumeration

Vulnfanatic ⭐ 204

A Binary Ninja plugin for vulnerability research.

Sbt Dependency Check ⭐ 188

SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 🌈

Shodanwave ⭐ 184

Shodanwave is a tool for exploring and obtaining information from Netwave IP Camera.

Rebel Framework ⭐ 183

Advanced and easy to use penetration testing framework 💣🔎

Patrowlengines ⭐ 164

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Zeebsploit ⭐ 160

web scanner - exploitation - information gathering

Burp Molly Scanner ⭐ 146

Turn your Burp suite into headless active web application vulnerability scanner

Detexploit ⭐ 146

OSS Vulnerability Scanner for Windows Platform

Greenbone Vulnerability Manager - The database backend for the Greenbone Vulnerability Management (GVM) framework

Sdwannewhope ⭐ 141

SD-WAN security and insecurity

Owasp Orizon ⭐ 132

Owasp Orizon is a source code static analyzer tool designed to spot security issues in Java applications.

Vuln Web Apps ⭐ 129

A curated list of vulnerable web applications.

Vulnerablecode ⭐ 125

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode

Php Malware Detector ⭐ 123

PHP malware detector

XSSCon: Simple XSS Scanner tool

Arissploit ⭐ 114

Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.

Gvm Docker ⭐ 114

A Docker Image For Greenbone Vulnerability Management with OpenVAS

Patrowldocs ⭐ 107

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

Httprecon Nse ⭐ 81

Advanced web server fingerprinting for Nmap

All-in-one tool for managing vulnerability reports from AppSec pipelines

OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.

Magicrecon ⭐ 72

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.

Dep Scan ⭐ 68

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. Integrates with various CI environments such as Azure Pipelines, CircleCI, Google CloudBuild. No server required!

IVA is a system to scan for known vulnerabilities in software products installed inside an organization. IVA uses CPE identifiers to search for CVEs related to a software product.

Pentest Tools Framework ⭐ 47

Pentest Tools Framework is a database of exploits, Scanners and tools for penetration testing. Pentest is a powerful framework includes a lot of tools for beginners. You can explore kernel vulnerabilities, network vulnerabilities

Regslscan ⭐ 39

A tool for scanning registery key permissions. Find where non-admins can create symbolic links.

Ms17_010_scan ⭐ 23

ms17_010的批量扫描工具

Tool for information gathering, IPReverse, AdminFInder, DNS, WHOIS, SQLi Scanner with google.

Random IPv6 - circumvents restrictive IP address-based filter and blocking rules

1-91 of 91 projects

Advertising 📦 10

Application Programming Interfaces 📦 124

Applications 📦 192

Artificial Intelligence 📦 78

Blockchain 📦 73

Build Tools 📦 113

Cloud Computing 📦 80

Code Quality 📦 28

Collaboration 📦 32

Command Line Interface 📦 49

Community 📦 83

Companies 📦 60

Compilers 📦 63

Computer Science 📦 80

Configuration Management 📦 42

Content Management 📦 175

Control Flow 📦 213

Data Formats 📦 78

Data Processing 📦 276

Data Storage 📦 135

Economics 📦 64

Frameworks 📦 215

Graphics 📦 110

Hardware 📦 152

Integrated Development Environments 📦 49

Learning Resources 📦 166

Libraries 📦 129

Lists Of Projects 📦 22

Machine Learning 📦 347

Mapping 📦 64

Marketing 📦 15

Mathematics 📦 55

Messaging 📦 98

Networking 📦 315

Operating Systems 📦 89

Operations 📦 121

Package Managers 📦 55

Programming Languages 📦 245

Runtime Environments 📦 100

Science 📦 42

Security 📦 396

Social Media 📦 27

Software Architecture 📦 72

Software Development 📦 72

Software Performance 📦 58

Software Quality 📦 133

Text Editors 📦 49

Text Processing 📦 136

User Interface 📦 330

User Interface Components 📦 514

Version Control 📦 30

Virtualization 📦 71

Web Browsers 📦 42

Web Servers 📦 26

Web User Interface 📦 210