security-scanner

There are 108 repositories under security-scanner topic.

projectdiscovery / nuclei
Fast and customizable vulnerability scanner based on simple YAML based DSL.
attack-surface cve-scanner hacktoberfest nuclei-engine security security-scanner subdomain-takeover vulnerability-assessment vulnerability-detection vulnerability-scanner
Language:Go 18472
CISOfy / lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
shell linux pci-dss compliance security-audit security-hardening security-scanner security-vulnerability hipaa unix vulnerability-detection vulnerability-scanners vulnerability-assessment devops devops-tools system-hardening hardening auditing gdpr security-tools
Language:Shell 12832
zaproxy / zaproxy
The ZAP core project
appsec dast hacktoberfest security security-scanner zap zap-development zaproxy
Language:Java 12311
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
administrator cybersecurity freebsd go golang linux security security-audit security-automation security-hardening security-scanner security-tools security-vulnerability vulnerabilities vulnerability-assessment vulnerability-detection vulnerability-management vulnerability-scanner vulnerability-scanners vuls
Language:Go 10810
wpscanteam / wpscan
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com
hacking-tool scan scanner security security-scanner wordpress wpscan wpvulndb
Language:Ruby 8404
bandit
PyCQA / bandit
Bandit is a tool designed to find common security issues in Python code.
bandit linter python security security-scanner security-tools static-code-analysis
Language:Python 6173
awesome-shodan-queries
jakejarvis / awesome-shodan-queries
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻
awesome awesome-list cloud dorks hacking infosec internet-of-things iot network-infrastructure penetration-testing pentesting security security-scanner security-tools shodan shodan-dorks
5382
GhostTroops / scan4all
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
attack auto golang hacker tools nuclei bugbounty bugbounty-tools hacktools pentest-tool 0day brute-force nmap ssh vulnerabilities-scan recon security-scanner security-tools vulnerability-detection vulnerability-scanners
Language:Go 5375
Ladon
k8gege / Ladon
Ladon大型内网渗透工具，可PowerShell模块化、可CS插件化、可内存加载，无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。Ladon 12.2内置262个功能,网络资产探测模块32个通过多种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)以及方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等信息，高危漏洞检测16个含MS17010、Zimbra、Exchange
scanner portscan pentest hacking security security-tools security-scanner poc getshell brute-force password netscan tools hack exp ladon ipscanner exploit
Language:PowerShell 4706
microsoft / ApplicationInspector
A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.
application-inspector detection security-scanner security-tools software-characterization static-analysis
Language:C# 4190
toolswatch / blackhat-arsenal-tools
Official Black Hat Arsenal Security Tools Repository
arsenal blackhat forensics hacking hacking-tool ics-scada security-scanner security-tools webapp
3786
webhintio / hint
💡 A hinting engine for the web
a11y best-practices hacktoberfest hint hints interoperability lint performance pwa pwas security security-scanner webhint
Language:TypeScript 3605
scipag / vulscan
Advanced vulnerability scanning with Nmap NSE
exploit lua lua-script nmap nmap-scan-script nmap-scripts nse nsescript penetration-testing security security-audit security-scanner vulnerability vulnerability-assessment vulnerability-database-entry vulnerability-databases vulnerability-detection vulnerability-identification vulnerability-scanners vulnerability-scanning
Language:Lua 3392
FeeiCN / Cobra
Source Code Security Audit (源代码安全审计)
cobra code-audit sourcecode-analysis security-tools security-audit security-scanner
Language:Python 3128
evyatarmeged / Raccoon
A high performance offensive security tool for reconnaissance and vulnerability scanning
reconnaissance scanner vulnerability-assessment vulnerability-scanner enumeration pentesting pentest-tool hacking-tool offensive-security security-scanner fuzzing information-gathering hacking raccoon osint
Language:Python 3036
kube-score
zegl / kube-score
Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your Kubernetes YAML and Charts. Static code analysis for Kubernetes.
analysis automation charts ci go hacktoberfest helm k8s kube-score kubernetes kubernetes-manifests kubernetes-monitoring linter security security-scanner static-code-analysis static-code-analyzer
Language:Go 2676
ajinabraham / nodejsscan
nodejsscan is a static security code scanner for Node.js applications.
code-analysis code-review devsecops javascript lint node node-security nodejs nodejsscan sast security security-scanner static-analysis
Language:CSS 2361
FeeiCN / GSIL
GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）
security-scanner security-tools sensitive-data sensitive-data-security
Language:Python 2112
codingo / Reconnoitre
A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
oscp penetration-testing scanner security security-audit security-tools security-scanner offensive-security nmap enumeration scanning kali-linux service-enumeration services-discovered discover-services range snmp hacking hacking-tool virtual-hosts
Language:Python 2087
sn0int
kpcyrd / sn0int
Semi-automatic OSINT framework and package manager
osint intelligence osint-framework certificate-transparency rust security security-audit security-scanner investigation reconnaissance recon lua pentesting location bug-bounty
Language:Rust 1933
bearer
Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
appsec compliance devsecops devsecops-tools security security-tools dataflow gdpr privacy sast static-code-analysis vulnerability security-audit security-scanner vulnerabilities code-quality static-analysis security-automation owasp
Language:Go 1887
AV1080p / Hacking-With-Golang
Golang安全资源合集
golang security security-tools buster reverse-shell proxy security-scanner
1727
skavngr / rapidscan
:new: The Multi-Tool Web Vulnerability Scanner.
scanner vulnerability-scanners scanner-web web-vulnerabilities-scanner security-tools security-scanner penetration-testing-framework penetration-testing vulnerability-assessment vulnerability-scanner vulnerability-management oscp vulnerability-detection kali-scripts kali-linux vulnerabilities security-scanning offensive-security enumeration reconnaissance
Language:Python 1697
XAttacker
Moham3dRiahi / XAttacker
X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
vulnerability-scanner vulnerability-detection vulnerability-exploit vulnerability-assessment security-scanner scanner security-tools website-vulnerability-scanner hacking hacking-tool pentest wp-scanner wordpress prestashop joomla lokomedia drupal auto-exploiter exploit exploitation
Language:Perl 1528
Adminisme / ServerScan
ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。
serverscan pentest-tool security-scanner golang service-discovery port-scanner-in-go win linux macos cobalt-strike nmap
Language:Go 1527
inql
doyensec / inql
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
api-documentation-tool bugbounty bugbounty-tool burp-extensions burpsuite graphql graphql-security penetration-testing security-audit security-scanner security-tools
Language:Python 1495
shekyan / slowhttptest
Application Layer DoS attack simulator
security-scanner slowhttptest performance-metrics
Language:C++ 1482
ztgrace / changeme
A default credential scanner.
default-creds infosec penetration-testing python security security-scanner security-tools
Language:Python 1423
BishopFox / GitGot
Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
security-tools security security-scanner github-api fuzzy-matching python sensitive-data-exposure osint reconnaissance recon gists gist-search
Language:Python 1408
intrigueio / intrigue-core
Discover Your Attack Surface!
attack-surface discovery information-gathering intelligence-gathering intrigue osint penetration-testing reconnaissance security security-scanner vulnerability-scanners
Language:Ruby 1338
denji / golang-tls
Simple Golang HTTPS/TLS Examples
http2 https-server https httpclient golang go openssl libressl awesome tools security-hardening security-tools security-audit security-scanner secure security
1236
fkie-cad / cwe_checker
cwe_checker finds vulnerable patterns in binary executables
binary-analysis cwe cwe-checker ghidra program-analysis reverse-engineering security security-scanner static-analyzer vulnerability-scanner
Language:Rust 1086
leondz / garak
LLM vulnerability scanner
llm ai infosectools llms security-scanner vulnerability-scanner
Language:Python 1084
FeeiCN / ESD
Enumeration sub domains(枚举子域名)
subdomain-scanner subdomain-brute security-scanner security-tools brute-force
Language:Python 1055
WithSecureLabs / doublepulsar-detection-script
A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.
security-scanner security-tools countercept doublepulsar script
Language:Python 1020
protofire / solhint
Solhint is an open-source project to provide a linting utility for Solidity code.
solidity linter security-scanner ethereum ast developer-tools code-quality smart-contracts solhint dapp
Language:JavaScript 1011