security-audit

There are 124 repositories under security-audit topic.

gojue / ecapture
Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.
android android-https-capture ebpf ebpf-go ebpf-tc ebpf-uprobe golang https linux network-capture security-audit ssl ssldump tcpdump tls
Language:C 13863
CISOfy / lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
auditing compliance devops devops-tools gdpr hardening hipaa linux pci-dss security-audit security-hardening security-scanner security-tools security-vulnerability shell system-hardening unix vulnerability-assessment vulnerability-detection vulnerability-scanners
Language:Shell 13762
wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
cloud-security compliance configuration-assessement container-security cybersecurity file-integrity-monitoring incident-response infosec log-analysis malware-detection pci-dss security security-audit security-automation security-hardening security-tools siem vulnerability-detection wazuh xdr
Language:C++ 11591
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
administrator cybersecurity freebsd go golang linux security security-audit security-automation security-hardening security-scanner security-tools security-vulnerability vulnerabilities vulnerability-assessment vulnerability-detection vulnerability-management vulnerability-scanner vulnerability-scanners vuls
Language:Go 11193
prowler
prowler-cloud / prowler
Prowler is an Open Cloud Security tool for AWS, Azure, GCP and Kubernetes. It helps for continuos monitoring, security assessments and audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more.
aws azure cis-benchmark cloud compliance cspm devsecops forensics gcp gdpr hardening iam multi-cloud python saas security security-audit security-hardening security-tools well-architected
Language:Python 11163
Scanners-Box
We5ter / Scanners-Box
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
apk-analysis binary-analysis code-analyzer devsecops exploitation-framework hacker-tools information-security malware-analysis penetration-testing pentesting-tools privacy-compliance redteam-tools security-audit security-automation smart-contracts static-analysis vulnerability-scanners wifi-hacking wifi-security
8380
brakeman
presidentbeef / brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
brakeman rails ruby security security-audit security-tools security-vulnerability static-analysis vulnerabilities
Language:Ruby 7061
jeremylong / DependencyCheck
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
ant-task build-tool gradle-plugin jenkins-plugin maven-plugin security security-audit software-composition-analysis vulnerability-detection
Language:Java 6664
google / osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
scanner security-audit security-tools vulnerability-scanner
Language:Go 6473
infobyte / faraday
Open Source Vulnerability Management Platform
appsec burpsuite collaboration continuous-scanning cve cybersecurity devops devsecops infosec nessus nmap orchestration penetration-testing pentesting security security-audit security-automation vulnerability vulnerability-management vulnerability-scanners
Language:Python 5175
charles2gan / GDA-android-reversing-Tool
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
decompiler malware-analysis mobile-security privacy-protection security-audit vulnerability-scanners
Language:Java 4304
Arachni / arachni
Web Application Security Scanner Framework
analysis arachni audit crawler detection dom hack hacking javascript modular penetration-testing ruby scanner scanners security-audit sql-injection vulnerability-detection web-application xss
Language:Ruby 3828
ysrc / xunfeng
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
exploits infosec pentesting scanner security security-audit vulnerability-assessment vulnerability-detection vulnerability-scanners
Language:Python 3557
scipag / vulscan
Advanced vulnerability scanning with Nmap NSE
exploit lua lua-script nmap nmap-scan-script nmap-scripts nse nsescript penetration-testing security security-audit security-scanner vulnerability vulnerability-assessment vulnerability-database-entry vulnerability-databases vulnerability-detection vulnerability-identification vulnerability-scanners vulnerability-scanning
Language:Lua 3538
aquasecurity / cloudsploit
Cloud Security Posture Management (CSPM)
alibaba aqua aws azure cloud cspm gcp oci oracle security security-audit
Language:JavaScript 3417
FeeiCN / Cobra
Source Code Security Audit (源代码安全审计)
cobra code-audit security-audit security-scanner security-tools sourcecode-analysis
Language:Python 3158
codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
bugbounty couchdb databases enumeration hacking hacking-tool hacktoberfest mongodb mongodb-database nosql nosql-databases offensive-security penetration-testing redis scanner security-audit security-tools security-toolset sql-injection web-application-security
Language:Python 2995
techgaun / github-dorks
Find leaked secrets via github search
dork dorker github-dork hacking hacktoberfest security-audit
Language:Python 2869
goodwithtech / dockle
Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
containers docker go golang kubernetes linter security security-audit security-tools vulnerability
Language:Go 2829
rubysec / bundler-audit
Patch-level verification for Bundler
bundler-audit dependency-checker patch-management ruby ruby-advisory-db security security-audit security-tools
Language:Ruby 2695
grayddq / GScan
本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。
auditing security security-audit security-scanning security-tools vulnerability-scanning
Language:Python 2665
evilsocket / bettercap
DEPRECATED, bettercap developement moved here: https://github.com/bettercap/bettercap
bettercap ettercap man-in-the-middle mitm proxy security security-audit spoofing sslstrip tls
2499
pwndoc / pwndoc
Pentest Report Generator
audit collaboration infosec penetration-testing pentest pentesting-tool reporting reporting-tool security security-audit security-tool vulnerabilities
Language:JavaScript 2380
find-sec-bugs
find-sec-bugs / find-sec-bugs
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
bytecode code-analysis cwe findbugs hacktoberfest java owasp security security-audit static-analysis taint-analysis
Language:Java 2304
little-rat
dnakov / little-rat
🐀 Small chrome extension to monitor (and optionally block) other extensions' network calls
browser chrome-extension chromium javascript security-audit
Language:JavaScript 2167
bearer
Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
appsec code-quality compliance dataflow devsecops devsecops-tools gdpr owasp privacy sast security security-audit security-automation security-scanner security-tools static-analysis static-code-analysis vulnerabilities vulnerability
Language:Go 2161
codingo / Reconnoitre
A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
discover-services enumeration hacking hacking-tool kali-linux nmap offensive-security oscp penetration-testing range scanner scanning security security-audit security-scanner security-tools service-enumeration services-discovered snmp virtual-hosts
Language:Python 2132
sn0int
kpcyrd / sn0int
Semi-automatic OSINT framework and package manager
bug-bounty certificate-transparency intelligence investigation location lua osint osint-framework pentesting recon reconnaissance rust security security-audit security-scanner
Language:Rust 2127
OWASP / owasp-masvs
The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
android-app audit gitbook ios-app mastg masvs mobile mstg owasp penetration-testing penetration-tests security security-audit security-standards standard verification
Language:Python 2089
m0nad / Diamorphine
LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)
advanced-persistent-threat backdoor c hacking hacking-tool kernel kernel-module linux linux-kernel lkm-rootkit malware pentest pentesting redteam redteaming rootkit security security-audit security-tools stealth
Language:C 1912
DSInternals
MichaelGrafnetter / DSInternals
Directory Services Internals (DSInternals) PowerShell Module and Framework
active-directory azure-ad dpapi fido2 lsa ntds nuget-packages passwords penetration-testing powershell sam security-audit
Language:C# 1677
fixinventory
someengineering / fixinventory
Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.
aws cnapp cspm cybersecurity digitalocean gcp infrastructure-as-code policy-as-code security security-audit security-automation
Language:Python 1627
sysreptor
Syslifters / sysreptor
A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.
cape cdsa chhb cpts hackthebox infosectools offsec oscp osed osep oswa oswp penetration-testing pentest-reports pentesting-tool report-generator reporting reporting-tool security-assessment security-audit
Language:Python 1608
inql
doyensec / inql
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
api-documentation-tool bugbounty bugbounty-tool burp-extensions burpsuite graphql graphql-security penetration-testing security-audit security-scanner security-tools
Language:Python 1578
wireghoul / graudit
grep rough audit - source code auditing tool
security security-audit security-tools shell source-code vulnerability-detection
Language:Shell 1572
w5
w5teams / w5
Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效
soar hacking w5 w5soar tools hack security security-tools security-automation hacker python3 automation python-script security-audit devops shuffle walkoff
Language:Python 1504