security-vulnerability

There are 37 repositories under security-vulnerability topic.

CISOfy / lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
shell linux pci-dss compliance security-audit security-hardening security-scanner security-vulnerability hipaa unix vulnerability-detection vulnerability-scanners vulnerability-assessment devops devops-tools system-hardening hardening auditing gdpr security-tools
Language:Shell 12497
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
vuls vulnerability-scanners golang go linux freebsd vulnerability-detection security security-tools cybersecurity security-vulnerability security-scanner security-hardening security-automation security-audit vulnerability-assessment vulnerability-management vulnerability-scanner vulnerabilities administrator
Language:Go 10660
brakeman
presidentbeef / brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
ruby rails security static-analysis vulnerabilities brakeman security-vulnerability security-tools security-audit
Language:Ruby 6906
google / syzkaller
syzkaller is an unsupervised coverage-guided kernel fuzzer
fuzz-testing fuzzer fuzzing kernel linux security security-tools security-vulnerability testing
Language:Go 5120
Cheatsheet-God
OlivierLaflamme / Cheatsheet-God
Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
penetration-testing security hacking cheatsheet oscp information-security pentesting howto-tutorial refresher penetration-test cheatsheet-god oscp5 oscp-tools oscp-journey penetration security-tools security-vulnerability hacking-tool hacking-code awesome
4712
Roave / SecurityAdvisories
:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily
composer infosec php security-advisories security-vulnerabilities security-vulnerability
2643
payloadbox / command-injection-payload-list
🎯 Command Injection Payload List
command-injection injection security-vulnerability vulnerability payload-list payload os-injection command os unix linux windows macos application application-security bugbounty security security-research vulnerability-research security-testing
2637
cliffe / SecGen
Create randomly insecure VMs
security security-vulnerability virtualization randomization provisioning labs ctf-challenges cybok
Language:Python 2574
brunofacca / zen-rails-security-checklist
Checklist of security precautions for Ruby on Rails applications.
ruby ruby-on-rails rails security security-vulnerability checklist
Language:Ruby 1814
opensec-cn / kunpeng
kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。
poc-library proof-of-concept security-testing security-vulnerability
Language:Go 1648
pyupio / safety
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
python security security-vulnerability travis vulnerability-scanners vulnerability-detection
Language:Python 1625
0xRadi / OWASP-Web-Checklist
OWASP Web Application Security Testing Checklist
owasp security security-tools security-vulnerability bugbounty testing checklist
1521
jaebradley / uber-cli
🚗Uber, at your fingertips
uber security-vulnerability security-incidents command-line-tool
Language:JavaScript 1182
httpvoid / writeups
appsec security security-vulnerability
1155
jxy-s / herpaderping
Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.
exploit windows security process-herpaderping vulnerability security-vulnerability exploitation exploits exploit-development exploit-framework windows-10 windows-7 windows-defender antivirus antivirus-evasion process-migration process-hollowing process-doppelganging
Language:C++ 1057
bloodzer0 / ossa
Open-Source Security Architecture | 开源安全架构
application-security business-security code-audit ids ips security security-audit security-scanner security-tools security-vulnerability vulnerabilities vulnerability-scanners
920
PentestPad / subzy
Subdomain takeover vulnerability checker
cybersecurity bugbounty security-vulnerability subdomain-takeover security-research
Language:Go 869
0xbug / SQLiScanner
Automatic SQL injection with Charles and sqlmap api
autoscan scanner security security-audit security-vulnerability sqlmap sqlmap-webui sqlmapapi
Language:Python 774
ohmybahgosh / RockYou2021.txt
RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!
wordlist rockyou rockyou2021 wordlists password-strength password-safety hashcat security-audit security-vulnerability security wordlists-dictionary-collection
736
Eugnis / spectre-attack
Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)
c example exploit security-vulnerability spectre
Language:C 735
nluedtke / linux_kernel_cves
Tracking CVEs for the linux Kernel
cve linux linux-kernel linux-security security-audit security-vulnerability tracker tracking-cves
Language:Vue 720
Fuzzapi / fuzzapi
Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem
api automation fuzzer rails ruby security security-vulnerability
Language:Ruby 619
tlsfuzzer / tlsfuzzer
SSL and TLS protocol test suite and fuzzer
tlslite-ng tls ssl security-audit security-vulnerability test-framework test-automation testing-tools test-suite tlslite protocol-verifier protocol-tester automation rfc-compliance standard-conformity robot drown tls13 tls12 fuzzer
Language:Python 536
LockGit / Hacking
Hacker, ready for more of our story ! 🚀
hack attack geek cracker poc hacking tools hacker hacking-tool attacker attacks security-vulnerability scanner vulnerability vulnerabilities vulnerability-scanners security security-research tool
Language:Python 521
pyupio / pyup
A tool to update your project's dependencies on GitHub. Runs on pyup.io, comes with a command line interface.
dependency dependency-manager security-vulnerability security security-tools
Language:Python 439
flipkart-incubator / watchdog
Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.
security-tools security security-vulnerability security-testing vulnerability-management vulnerability-assessment pentest-tool penetration-testing-framework cve-databases cve-search application-security network-security product-security bugbounty
Language:Python 407
zricethezav / h1domains
HackerOne "in scope" domains
security security-tools security-vulnerability security-automation hackerone hackerone-api
Language:Python 372
factionsecurity / faction
Pen Test Report Generation and Assessment Collaboration
application-security hacking penetration-testing penetration-testing-tools pentesting reporting security security-audit security-automation security-tools security-vulnerability
Language:JavaScript 352
srcclr / commit-watcher
Find interesting and potentially hazardous commits in git projects
regular-expression auditing rds security-vulnerability docker rails email-notification database watch favor
Language:Ruby 351
Boyan-MILANOV / ropium
ROPium is a tool that helps you building ROP exploits by finding and chaining gadgets together
gadget rop-chain rop-gadgets semantic chaining-gadgets rop-exploits exploit-development binary-exploitation security security-vulnerability
Language:C++ 349
deadbits / InsecureProgramming
mirror of gera's insecure programming examples | http://community.coresecurity.com/~gera/InsecureProgramming/
c exploitation learning-exercise security security-vulnerability vulnerabilities
Language:C 261
momo5502 / cod-exploits
☠️ Call of Duty - Vulnerabilities and proof-of-concepts
assembly cod cpp exploit hack ida mw2 poc security-vulnerability
Language:C++ 252
bureado / awesome-software-supply-chain-security
A compilation of resources in the software supply chain security domain, with emphasis on open source
reproducible-builds supply-chain-security devsecops vulnerability-scanning security-vulnerability vulnerability-management supply-chain-attacks sbom package-management dependency-management static-analysis software-composition-analysis oss-compliance software-supply-chain software-supply-chain-security dependencies cve-scanning attestation awesome-list
251
narbehaj / ssl-checker
Python script that collects SSL/TLS information from hosts
ssl certificate x509 x509certificates ssl-certificates tls python openssl python-script ssl-checker pyopenssl poodle hearbeat hearbleed security-vulnerability json csv analyze analyzer html
Language:Python 238
fabric8-analytics / fabric8-analytics-vscode-extension
Red Hat Dependency Analytics extension
dependency-analytics security-vulnerability insights cve nvd online-flow ide-extension
Language:TypeScript 220
radenvodka / Recsech
Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .
recon research tools recon-tools php security-vulnerability security-audit security-tools hacking-tool websecurity scanner-vulnerability recsech penetration-testing-tools penetration-testing dns scanner scanner-web subdomain-enumeration reconnaissance subdomain-takeovers
Language:PHP 209