security-audit

There are 119 repositories under security-audit topic.

CISOfy / lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
auditing compliance devops devops-tools gdpr hardening hipaa linux pci-dss security-audit security-hardening security-scanner security-tools security-vulnerability shell system-hardening unix vulnerability-assessment vulnerability-detection vulnerability-scanners
Language:Shell 13049
gojue / ecapture
Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.
android android-https-capture ebpf ebpf-go ebpf-tc ebpf-uprobe golang https linux network-capture security-audit ssl ssldump tcpdump tls
Language:C 12402
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
administrator cybersecurity freebsd go golang linux security security-audit security-automation security-hardening security-scanner security-tools security-vulnerability vulnerabilities vulnerability-assessment vulnerability-detection vulnerability-management vulnerability-scanner vulnerability-scanners vuls
Language:Go 10908
prowler
prowler-cloud / prowler
Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
aws azure cis-benchmark cloud compliance devsecops forensics gcp gdpr hardening iam multi-cloud python security security-audit security-hardening security-tools well-architected
Language:Python 10559
wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
security compliance log-analysis vulnerability-detection cybersecurity file-integrity-monitoring infosec malware-detection cloud-security container-security security-automation security-tools siem xdr configuration-assessement incident-response pci-dss security-audit security-hardening wazuh
Language:C++ 10423
Scanners-Box
We5ter / Scanners-Box
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
pentesting-tools hacker-tools vulnerability-scanners information-security redteam-tools penetration-testing devsecops security-automation smart-contracts privacy-compliance apk-analysis binary-analysis exploitation-framework malware-analysis security-audit code-analyzer static-analysis wifi-hacking wifi-security
8196
brakeman
presidentbeef / brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
brakeman rails ruby security security-audit security-tools security-vulnerability static-analysis vulnerabilities
Language:Ruby 6981
jeremylong / DependencyCheck
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
security-audit build-tool maven-plugin jenkins-plugin gradle-plugin vulnerability-detection security ant-task software-composition-analysis
Language:Java 6307
google / osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
scanner security-audit security-tools vulnerability-scanner
Language:Go 6124
infobyte / faraday
Open Source Vulnerability Management Platform
appsec burpsuite collaboration continuous-scanning cve cybersecurity devops devsecops infosec nessus nmap orchestration penetration-testing pentesting security security-audit security-automation vulnerability vulnerability-management vulnerability-scanners
Language:Python 4879
charles2gan / GDA-android-reversing-Tool
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
decompiler vulnerability-scanners malware-analysis security-audit mobile-security privacy-protection
Language:Java 4122
Arachni / arachni
Web Application Security Scanner Framework
analysis arachni audit crawler detection dom hack hacking javascript modular penetration-testing ruby scanner scanners security-audit sql-injection vulnerability-detection web-application xss
Language:Ruby 3753
ysrc / xunfeng
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
exploits infosec pentesting scanner security security-audit vulnerability-assessment vulnerability-detection vulnerability-scanners
Language:Python 3533
scipag / vulscan
Advanced vulnerability scanning with Nmap NSE
exploit lua lua-script nmap nmap-scan-script nmap-scripts nse nsescript penetration-testing security security-audit security-scanner vulnerability vulnerability-assessment vulnerability-database-entry vulnerability-databases vulnerability-detection vulnerability-identification vulnerability-scanners vulnerability-scanning
Language:Lua 3445
aquasecurity / cloudsploit
Cloud Security Posture Management (CSPM)
aws security security-audit cloud azure cspm aqua gcp oci oracle alibaba
Language:JavaScript 3306
FeeiCN / Cobra
Source Code Security Audit (源代码安全审计)
cobra code-audit security-audit security-scanner security-tools sourcecode-analysis
Language:Python 3141
codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
bugbounty couchdb databases enumeration hacking hacking-tool hacktoberfest mongodb mongodb-database nosql nosql-databases offensive-security penetration-testing redis scanner security-audit security-tools security-toolset sql-injection web-application-security
Language:Python 2867
techgaun / github-dorks
Find leaked secrets via github search
dork dorker github-dork hacking hacktoberfest security-audit
Language:Python 2761
goodwithtech / dockle
Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
containers docker go golang kubernetes linter security security-audit security-tools vulnerability
Language:Go 2750
rubysec / bundler-audit
Patch-level verification for Bundler
bundler-audit dependency-checker patch-management ruby ruby-advisory-db security security-audit security-tools
Language:Ruby 2677
grayddq / GScan
本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。
auditing security security-audit security-scanning security-tools vulnerability-scanning
Language:Python 2599
evilsocket / bettercap
DEPRECATED, bettercap developement moved here: https://github.com/bettercap/bettercap
bettercap ettercap man-in-the-middle mitm proxy security security-audit spoofing sslstrip tls
2500
find-sec-bugs
find-sec-bugs / find-sec-bugs
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
bytecode code-analysis cwe findbugs hacktoberfest java owasp security security-audit static-analysis taint-analysis
Language:Java 2260
pwndoc / pwndoc
Pentest Report Generator
audit collaboration infosec penetration-testing pentest pentesting-tool reporting reporting-tool security security-audit security-tool vulnerabilities
Language:JavaScript 2210
codingo / Reconnoitre
A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
oscp penetration-testing scanner security security-audit security-tools security-scanner offensive-security nmap enumeration scanning kali-linux service-enumeration services-discovered discover-services range snmp hacking hacking-tool virtual-hosts
Language:Python 2102
little-rat
dnakov / little-rat
🐀 Small chrome extension to monitor (and optionally block) other extensions' network calls
browser chrome-extension chromium javascript security-audit
Language:JavaScript 2073
OWASP / owasp-masvs
The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
masvs verification mobile security audit penetration-tests standard gitbook penetration-testing owasp security-audit security-standards mstg ios-app android-app mastg
Language:Python 2028
sn0int
kpcyrd / sn0int
Semi-automatic OSINT framework and package manager
osint intelligence osint-framework certificate-transparency rust security security-audit security-scanner investigation reconnaissance recon lua pentesting location bug-bounty
Language:Rust 1981
bearer
Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
appsec compliance devsecops devsecops-tools security security-tools dataflow gdpr privacy sast static-code-analysis vulnerability security-audit security-scanner vulnerabilities code-quality static-analysis security-automation owasp
Language:Go 1947
m0nad / Diamorphine
LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)
rootkit lkm-rootkit c kernel kernel-module security-tools linux linux-kernel hacking hacking-tool backdoor malware pentesting pentest redteam redteaming security-audit security advanced-persistent-threat stealth
Language:C 1789
DSInternals
MichaelGrafnetter / DSInternals
Directory Services Internals (DSInternals) PowerShell Module and Framework
active-directory azure-ad dpapi fido2 lsa ntds nuget-packages passwords penetration-testing powershell sam security-audit
Language:C# 1620
inql
doyensec / inql
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
api-documentation-tool bugbounty bugbounty-tool burp-extensions burpsuite graphql graphql-security penetration-testing security-audit security-scanner security-tools
Language:Python 1521
wireghoul / graudit
grep rough audit - source code auditing tool
security security-audit security-tools shell source-code vulnerability-detection
Language:Shell 1489
w5
w5teams / w5
Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效
automation devops hack hacker hacking python-script python3 security security-audit security-automation security-tools shuffle soar tools w5 w5soar walkoff
Language:Python 1482
cisagov / cset
Cybersecurity Evaluation Tool
cset security-audit
Language:TSQL 1419
felixgr / secure-ios-app-dev
Collection of the most common vulnerabilities found in iOS applications
ios security security-audit vulnerability-assessment
1390