There are 48 repositories under vulnerability-assessment topic.
Fast and customizable vulnerability scanner based on simple YAML based DSL.
This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Advanced vulnerability scanning with Nmap NSE
This repository contains the scanner component for Greenbone Community Edition.
A high performance offensive security tool for reconnaissance and vulnerability scanning
cve-search - a tool to perform local searches for known vulnerabilities
ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.
vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.
:new: The Multi-Tool Web Vulnerability Scanner.
X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
Collection of the most common vulnerabilities found in iOS applications
Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.
Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.
Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.
Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.
Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.
An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.
A Binary Ninja plugin for vulnerability research.
A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python
List of payloads and wordlists that are specifically crafted to identify and exploit vulnerabilities in target web applications.
An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.
Remote control your Greenbone Community Edition or Greenbone Enterprise Appliance
OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.
API that leverages Clair to scan Docker Registries and Kubernetes Clusters for vulnerabilities
Vulnerable Banking Suite
Determine whether your compute is truly vulnerable to a specific vulnerability by accounting for all factors which affect *actual* exploitability (runtime execution, configuration, permissions, existence of a mitigation, OS, etc..)
Application and Service Fingerprinting
Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.