Awesome Open Source
Search
Programming Languages
Languages
All Categories
Categories
About
Search results for vulnerability scanner
vulnerability-scanner
x
449 search results found
Sqlmap
⭐
29,628
Automatic SQL injection and database takeover tool
Trivy
⭐
20,160
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Nuclei
⭐
16,189
Fast and customizable vulnerability scanner based on simple YAML based DSL.
Lynis
⭐
12,150
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Vuls
⭐
10,487
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Xray
⭐
9,132
一款完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
Scanners Box
⭐
8,001
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
Grype
⭐
7,107
A vulnerability scanner for container images and filesystems
Tfsec
⭐
6,594
Security scanner for your Terraform code
Osv Scanner
⭐
5,632
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Scan4all
⭐
5,343
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
Threatmapper
⭐
4,534
Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more.
Faraday
⭐
4,422
Open Source Vulnerability Management Platform
Commix
⭐
4,328
Automated All-in-One OS Command Injection Exploitation Tool.
Gda Android Reversing Tool
⭐
3,519
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
Nginx Ultimate Bad Bot Blocker
⭐
3,451
Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
Vulscan
⭐
2,983
Advanced vulnerability scanning with Nmap NSE
Xunfeng
⭐
2,946
巡风是一款适用于企业内网的漏洞快速应急,巡航扫描系统。
Raccoon
⭐
2,928
A high performance offensive security tool for reconnaissance and vulnerability scanning
Nettacker
⭐
2,915
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
Secretscanner
⭐
2,900
🔓 🔓 Find secrets and passwords in container images and file systems 🔓 🔓
Openvas Scanner
⭐
2,836
This repository contains the scanner component for Greenbone Community Edition.
Crawlergo
⭐
2,642
A powerful browser crawler for web vulnerability scanners
Awesome Termux Hacking
⭐
2,550
⚡️An awesome list of the best Termux hacking tools
Afrog
⭐
2,451
A Security Tool for Bug Bounty, Pentest and Red Teaming.
Emba
⭐
2,229
EMBA - The firmware security analyzer
Poc T
⭐
1,925
渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework
Kics
⭐
1,882
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Bbscan
⭐
1,801
A fast vulnerability scanner
Fuxploider
⭐
1,702
File upload vulnerability scanner and exploitation tool.
Poc Bomber
⭐
1,604
利用大量高威胁poc/exp快速获取目标权限,用于渗透和红队快速打点
Burpbounty
⭐
1,586
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
Safety
⭐
1,577
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
Rapidscan
⭐
1,489
🆕 The Multi-Tool Web Vulnerability Scanner.
Xattacker
⭐
1,486
X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
Binabsinspector
⭐
1,450
BinAbsInspector: Vulnerability Scanner for Binaries
Struts Scan
⭐
1,426
Python2编写的struts2漏洞全版本检测和利用工具
Osv.dev
⭐
1,389
Open source vulnerability DB and triage service.
V3n0m Scanner
⭐
1,342
Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
Pocassist
⭐
1,341
傻瓜式漏洞PoC测试框架
Atscan
⭐
1,270
Advanced dork Search & Mass Exploit Scanner
Passive Scan Client
⭐
1,225
Burp被动扫描流量转发插件
Intrigue Core
⭐
1,205
Discover Your Attack Surface!
Crlfuzz
⭐
1,155
A fast tool to scan CRLF vulnerability written in Go
Satansword
⭐
1,048
红队综合渗透框架
Perun
⭐
1,037
Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫
Joomscan
⭐
1,033
OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/
Cwe_checker
⭐
996
cwe_checker finds vulnerable patterns in binary executables
Whitewidow
⭐
952
SQL Vulnerability Scanner
Zeus Scanner
⭐
921
Advanced reconnaissance utility
Dep Scan
⭐
916
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
Corsy
⭐
887
CORS Misconfiguration Scanner
Trivy Operator
⭐
886
Kubernetes-native security toolkit
Super Xray
⭐
877
Web漏洞扫描工具XRAY的GUI启动器
Ssh Snake
⭐
874
SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
Vfeed
⭐
830
The Correlated CVE Vulnerability And Threat Intelligence Database API
Pentesttools
⭐
816
Awesome Pentest Tools Collection
Terrapin Scanner
⭐
811
This repository contains a simple vulnerability scanner for the Terrapin attack present in the paper "Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation".
Php Exploit Scripts
⭐
811
A collection of PHP exploit scripts, found when investigating hacked servers. These are stored for educational purposes and to test fuzzers and vulnerability scanners. Feel free to contribute.
Silver
⭐
768
Mass scan IPs for vulnerable services
Hack Tools
⭐
764
hack tools
Web Cache Vulnerability Scanner
⭐
756
Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).
Robber
⭐
753
Robber is open source tool for finding executables prone to DLL hijacking
Clair Scanner
⭐
738
Docker containers vulnerability scan
Ofx
⭐
725
漏洞批量验证框架
Apache Ultimate Bad Bot Blocker
⭐
718
Apache Block Bad Bots, (Referer) Spam Referrer Blocker, Vulnerability Scanners, Malware, Adware, Ransomware, Malicious Sites, Wordpress Theme Detectors and Fail2Ban Jail for Repeat Offenders
Ossa
⭐
711
Open-Source Security Architecture | 开源安全架构
Corscanner
⭐
701
Fast CORS misconfiguration vulnerabilities scanner🍻
Garud
⭐
694
An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.
Go Dork
⭐
677
The fastest dork scanner written in Go.
Betterscan Ce
⭐
673
Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners + OpenAI GPT with One Report (Code, IaC) - Betterscan Community Edition (CE)
Antenna
⭐
673
Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工
Autopwn Suite
⭐
636
AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
Log4j Detector
⭐
622
Log4J scanner that detects vulnerable Log4J versions (CVE-2021-44228, CVE-2021-45046, etc) on your file-system within any application. It is able to even find Log4J instances that are hidden several layers deep. Works on Linux, Windows, and Mac, and everywhere else Java runs, too!
Jackhammer
⭐
599
Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.
Wordpresscan
⭐
598
WPScan rewritten in Python + some WPSeku ideas
Patrowlmanager
⭐
598
PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform
Xpoc
⭐
591
为供应链漏洞扫描设计的快速应急响应工具 [快速应急] [漏洞扫描] [端口扫描] [xray2.0进行时] A fast emergency response tool designed for supply chain vulnerability scanning.
Packj
⭐
573
Packj stops ⚡ Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain
Jok3r
⭐
564
Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework
Garak
⭐
559
LLM vulnerability scanner
Hellraiser
⭐
551
Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.
Hacking
⭐
515
hacker, ready for more of our story ! 🚀
Redteam_toolkit
⭐
512
Red Team Toolkit is an Open-Source Django Offensive Web-App which is keeping the useful offensive tools used in the red-teaming together.
Killshot
⭐
472
A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner
Ppfuzz
⭐
460
A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀
Sandworm Audit
⭐
455
Security & License Compliance For Your App's Dependencies 🪱
Vulnerablecode
⭐
447
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
Iblessing
⭐
438
iblessing is an iOS security exploiting toolkit, it mainly includes application information gathering, static analysis and dynamic analysis. It can be used for reverse engineering, binary analysis and vulnerability mining.
Eraser
⭐
436
🧹 Cleaning up images from Kubernetes nodes
Vanquish
⭐
422
Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.
Securitymanageframwork
⭐
421
Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.
Wscan
⭐
415
Wscan is a web security scanner that focuses on web security, dedicated to making web security accessible to everyone.
Sec Tools
⭐
412
🍉一款基于Python-Django的多功能Web安全渗透测试工具,包含漏洞扫描,端口扫描,指纹识
Bomber
⭐
406
Scans Software Bill of Materials (SBOMs) for security vulnerabilities
Hexraystoolbox
⭐
391
Hexrays Toolbox - Find code patterns within the Hexrays AST
Vulscan
⭐
382
vulscan 扫描系统:最新的poc&exp漏洞扫描,redis未授权、敏感文件、java反序列化、tomcat命
Saucerframe
⭐
382
python3批量poc检测工具
Hackerenv
⭐
375
Logmepwn
⭐
370
A fully automated, reliable, super-fast, mass scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.
1-100 of 449 search results
Next >
Privacy
|
About
|
Terms
|
Follow Us On Twitter
Copyright 2018-2024 Awesome Open Source. All rights reserved.