security-audit

There are 110 repositories under security-audit topic.

CISOfy / lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
shell linux pci-dss compliance security-audit security-hardening security-scanner security-vulnerability hipaa unix vulnerability-detection vulnerability-scanners vulnerability-assessment devops devops-tools system-hardening hardening auditing gdpr security-tools
Language:Shell 12583
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
vuls vulnerability-scanners golang go linux freebsd vulnerability-detection security security-tools cybersecurity security-vulnerability security-scanner security-hardening security-automation security-audit vulnerability-assessment vulnerability-management vulnerability-scanner vulnerabilities administrator
Language:Go 10699
prowler
prowler-cloud / prowler
Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
aws azure cis-benchmark cloud compliance devsecops forensics gcp gdpr hardening iam multi-cloud python security security-audit security-hardening security-tools well-architected
Language:Python 9640
wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
security compliance log-analysis vulnerability-detection cybersecurity file-integrity-monitoring infosec malware-detection cloud-security container-security security-automation security-tools siem xdr configuration-assessement incident-response pci-dss security-audit security-hardening wazuh
Language:C 9313
gojue / ecapture
Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.
golang ebpf tcpdump ssldump https tls security-audit network-capture android-https-capture ssl ebpf-go ebpf-tc ebpf-uprobe android linux
Language:C 8245
Scanners-Box
We5ter / Scanners-Box
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
pentesting-tools hacker-tools vulnerability-scanners information-security redteam-tools penetration-testing devsecops security-automation smart-contracts privacy-compliance apk-analysis binary-analysis exploitation-framework malware-analysis security-audit code-analyzer static-analysis wifi-hacking wifi-security
8010
brakeman
presidentbeef / brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
ruby rails security static-analysis vulnerabilities brakeman security-vulnerability security-tools security-audit
Language:Ruby 6918
jeremylong / DependencyCheck
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
security-audit build-tool maven-plugin jenkins-plugin gradle-plugin vulnerability-detection security ant-task software-composition-analysis
Language:Java 5924
google / osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
scanner security-audit security-tools vulnerability-scanner
Language:Go 5874
infobyte / faraday
Open Source Vulnerability Management Platform
devops penetration-testing vulnerability vulnerability-scanners security security-audit pentesting continuous-scanning infosec vulnerability-management collaboration burpsuite nessus nmap devsecops security-automation orchestration cve appsec cybersecurity
Language:Python 4641
charles2gan / GDA-android-reversing-Tool
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
decompiler vulnerability-scanners malware-analysis security-audit mobile-security privacy-protection
Language:Java 3926
Arachni / arachni
Web Application Security Scanner Framework
arachni dom ruby audit detection security-audit analysis modular javascript scanners web-application vulnerability-detection crawler scanner hack hacking penetration-testing xss sql-injection
Language:Ruby 3654
ysrc / xunfeng
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
security pentesting infosec exploits security-audit vulnerability-detection scanner vulnerability-assessment vulnerability-scanners
Language:Python 3504
scipag / vulscan
Advanced vulnerability scanning with Nmap NSE
vulnerability vulnerability-scanners vulnerability-detection vulnerability-identification vulnerability-assessment security security-audit security-scanner penetration-testing nmap nmap-scripts exploit vulnerability-scanning vulnerability-databases vulnerability-database-entry nmap-scan-script nse nsescript lua lua-script
Language:Lua 3337
aquasecurity / cloudsploit
Cloud Security Posture Management (CSPM)
aws security security-audit cloud azure cspm aqua gcp oci oracle alibaba
Language:JavaScript 3206
FeeiCN / Cobra
Source Code Security Audit (源代码安全审计)
cobra code-audit sourcecode-analysis security-tools security-audit security-scanner
Language:Python 3121
codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
nosql nosql-databases penetration-testing scanner security-audit security-tools security-toolset offensive-security enumeration databases mongodb couchdb web-application-security bugbounty redis mongodb-database sql-injection hacking hacking-tool hacktoberfest
Language:Python 2764
techgaun / github-dorks
Find leaked secrets via github search
dork dorker github-dork hacking hacktoberfest security-audit
Language:Python 2668
goodwithtech / dockle
Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
docker containers kubernetes security security-tools security-audit linter go golang vulnerability
Language:Go 2661
rubysec / bundler-audit
Patch-level verification for Bundler
bundler-audit dependency-checker patch-management ruby ruby-advisory-db security security-audit security-tools
Language:Ruby 2653
grayddq / GScan
本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。
auditing security security-audit security-scanning security-tools vulnerability-scanning
Language:Python 2504
evilsocket / bettercap
DEPRECATED, bettercap developement moved here: https://github.com/bettercap/bettercap
bettercap ettercap man-in-the-middle mitm proxy security security-audit spoofing sslstrip tls
2502
find-sec-bugs
find-sec-bugs / find-sec-bugs
The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
findbugs java security-audit owasp taint-analysis code-analysis security bytecode cwe static-analysis hacktoberfest
Language:Java 2209
codingo / Reconnoitre
A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
oscp penetration-testing scanner security security-audit security-tools security-scanner offensive-security nmap enumeration scanning kali-linux service-enumeration services-discovered discover-services range snmp hacking hacking-tool virtual-hosts
Language:Python 2076
pwndoc / pwndoc
Pentest Report Generator
pentest reporting pentesting-tool reporting-tool security security-tool collaboration audit security-audit penetration-testing vulnerabilities infosec
Language:JavaScript 2059
little-rat
dnakov / little-rat
🐀 Small chrome extension to monitor (and optionally block) other extensions' network calls
chrome-extension javascript security-audit browser chromium
Language:JavaScript 2001
OWASP / owasp-masvs
The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
masvs verification mobile security audit penetration-tests standard gitbook penetration-testing owasp security-audit security-standards mstg ios-app android-app mastg
Language:Python 1946
sn0int
kpcyrd / sn0int
Semi-automatic OSINT framework and package manager
osint intelligence osint-framework certificate-transparency rust security security-audit security-scanner investigation reconnaissance recon lua pentesting location bug-bounty
Language:Rust 1868
bearer
Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
appsec compliance devsecops devsecops-tools security security-tools dataflow gdpr privacy sast static-code-analysis vulnerability security-audit security-scanner vulnerabilities code-quality static-analysis security-automation owasp
Language:Go 1772
m0nad / Diamorphine
LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)
rootkit lkm-rootkit c kernel kernel-module security-tools linux linux-kernel hacking hacking-tool backdoor malware pentesting pentest redteam redteaming security-audit security advanced-persistent-threat stealth
Language:C 1672
DSInternals
MichaelGrafnetter / DSInternals
Directory Services Internals (DSInternals) PowerShell Module and Framework
security-audit penetration-testing active-directory nuget-packages ntds powershell dpapi sam lsa passwords azure-ad fido2
Language:C# 1536
inql
doyensec / inql
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
graphql security-scanner graphql-security api-documentation-tool security-tools security-audit burp-extensions burpsuite bugbounty bugbounty-tool penetration-testing
Language:Python 1473
w5
w5teams / w5
Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效
soar hacking w5 w5soar tools hack security security-tools security-automation hacker python3 automation python-script security-audit devops shuffle walkoff
Language:Python 1436
felixgr / secure-ios-app-dev
Collection of the most common vulnerabilities found in iOS applications
security security-audit vulnerability-assessment ios
1375
wireghoul / graudit
grep rough audit - source code auditing tool
security security-audit security-tools shell source-code vulnerability-detection
Language:Shell 1372
eliotsykes / rails-security-checklist
:key: Community-driven Rails Security Checklist (see our GitHub Issues for the newest checks that aren't yet in the README)
checklist rails-security rails rails-security-checklist ruby-on-rails security-audit security-hardening security
Language:Ruby 1355