vulnerability-detection

There are 102 repositories under vulnerability-detection topic.

aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
containers devsecops docker go golang hacktoberfest iac infrastructure-as-code kubernetes misconfiguration security security-tools vulnerability vulnerability-detection vulnerability-scanners
Language:Go 28913
projectdiscovery / nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
attack-surface cve-scanner dast hacktoberfest nuclei-engine security security-scanner subdomain-takeover vulnerability-assessment vulnerability-detection vulnerability-scanner
Language:Go 24777
CISOfy / lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
shell linux pci-dss compliance security-audit security-hardening security-scanner security-vulnerability hipaa unix vulnerability-detection vulnerability-scanners vulnerability-assessment devops devops-tools system-hardening hardening auditing gdpr security-tools
Language:Shell 14645
wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
security compliance log-analysis vulnerability-detection cybersecurity file-integrity-monitoring infosec malware-detection cloud-security container-security security-automation security-tools siem xdr configuration-assessement incident-response pci-dss security-audit security-hardening wazuh
Language:C 13479
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
vuls vulnerability-scanners golang go linux freebsd vulnerability-detection security security-tools cybersecurity security-vulnerability security-scanner security-hardening security-automation security-audit vulnerability-assessment vulnerability-management vulnerability-scanner vulnerabilities administrator
Language:Go 11739
kubescape
kubescape / kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
best-practice devops kubernetes mitre-attack nsa security vulnerability-detection
Language:Go 10982
projectdiscovery / nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
bugbounty exploit-development exploits fingerprint hacktoberfest nuclei nuclei-checks nuclei-templates security vulnerability-detection
Language:JavaScript 10901
dependency-check / DependencyCheck
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
security-audit build-tool maven-plugin jenkins-plugin gradle-plugin vulnerability-detection security ant-task software-composition-analysis
Language:Java 7188
GhostTroops / scan4all
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
attack auto golang hacker tools nuclei bugbounty bugbounty-tools hacktools pentest-tool 0day brute-force nmap ssh vulnerabilities-scan recon security-scanner security-tools vulnerability-detection vulnerability-scanners
Language:Go 5869
ThreatMapper
deepfence / ThreatMapper
Open Source Cloud Native Application Protection Platform (CNAPP)
cloud-native vulnerability-management threat-analysis devsecops secops registry-scanning security-tools cwpp observability cloudsecurity vulnerability-scanners vulnerability-detection scanning-tool cnapp compliance containers cspm devops kubernetes hacktoberfest
Language:TypeScript 5146
greenbone / openvas-scanner
This repository contains the scanner component for Greenbone Community Edition.
openvas vulnerability vulnerability-scanners vulnerability-detection vulnerability-assessment scanner vulnerability-management greenbone greenbone-vulnerability-management gvm openvas-scanner greenbone-community-edition foo c techops
Language:Rust 4049
Arachni / arachni
Web Application Security Scanner Framework
arachni dom ruby audit detection security-audit analysis modular javascript scanners web-application vulnerability-detection crawler scanner hack hacking penetration-testing xss sql-injection
Language:Ruby 3945
scipag / vulscan
Advanced vulnerability scanning with Nmap NSE
vulnerability vulnerability-scanners vulnerability-detection vulnerability-identification vulnerability-assessment security security-audit security-scanner penetration-testing nmap nmap-scripts exploit vulnerability-scanning vulnerability-databases vulnerability-database-entry nmap-scan-script nse nsescript lua lua-script
Language:Lua 3657
ysrc / xunfeng
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
security pentesting infosec exploits security-audit vulnerability-detection scanner vulnerability-assessment vulnerability-scanners
Language:Python 3589
dependency-track
DependencyTrack / dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
owasp appsec security bom vulnerabilities component-analysis nvd software-security software-composition-analysis sca bill-of-materials package-url purl vulnerability-detection ossindex sbom devsecops security-automation cyclonedx hacktoberfest
Language:Java 3230
Checkmarx / kics
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
appsec cloudnative devsecops golang hacktoberfest iac infrastructure-as-code open-policy-agent security security-tools vulnerability-detection vulnerability-scanners
Language:Open Policy Agent 2470
cve-search / cve-search
cve-search - a tool to perform local searches for known vulnerabilities
common-vulnerabilities cpe cve cve-databases cve-entries cve-scanning cve-search vulnerabilities vulnerability-assessment vulnerability-detection
Language:Python 2416
protectai / vulnhuntr
Zero shot vulnerability discovery using LLMs
ai llm security vulnerability-detection static-analysis
Language:Python 2290
anouarbensaad / vulnx
vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.
crawler information-gathering cms-detector cloudflare-detection bot pentest wp-scanner auto-exploiter vulnerability hacking website-vulnerability-scanner security-tools vulnerability-assessment vulnerability-exploit vulnerability-detection shell-injection detects-vulnerabilities exploits dorks subdomains-gathering
Language:Python 1928
skavngr / rapidscan
:new: The Multi-Tool Web Vulnerability Scanner.
scanner vulnerability-scanners scanner-web web-vulnerabilities-scanner security-tools security-scanner penetration-testing-framework penetration-testing vulnerability-assessment vulnerability-scanner vulnerability-management oscp vulnerability-detection kali-scripts kali-linux vulnerabilities security-scanning offensive-security enumeration reconnaissance
Language:Python 1921
safety
pyupio / safety
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
python security security-vulnerability travis vulnerability-scanners vulnerability-detection cicd dependency-management devsecops open-source-security package-management
Language:Python 1896
0xInfection / TIDoS-Framework
The Offensive Manual Web Application Penetration Testing Framework.
web-penetration-testing reconnaissance vulnerability-analysis scanning-enumeration web-fuzzer osint vulnerability-detection footprinting intelligence-gathering exploitation web-application-security tidos-framework enumeration
Language:Python 1838
top25-parameter
lutfumertceylan / top25-parameter
For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙
vulnerability-detection vulnerability-research bugbounty pentesting pentest-tool bugbountytips security infosec xss-detection
1749
murphysecurity / murphysec
An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。
codescan dependency sca scanner security software-composition-analysis software-supply-chain vulnerability-detection
Language:Go 1735
metlo-labs / metlo
Metlo is an open-source API security platform.
security api-gateway api-security application-security cybersecurity monitoring vulnerabilities vulnerability-detection metlo infosec api-pentest aws bugbounty bugbounty-tools infosectools pentest
Language:TypeScript 1725
wagiro / BurpBounty
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
bugbounty burp-extensions burpsuite bug-bounty vulnerability-scanner vulnerability-detection
Language:Java 1718
XAttacker
Moham3dRiahi / XAttacker
X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
vulnerability-scanner vulnerability-detection vulnerability-exploit vulnerability-assessment security-scanner scanner security-tools website-vulnerability-scanner hacking hacking-tool pentest wp-scanner wordpress prestashop joomla lokomedia drupal auto-exploiter exploit exploitation
Language:Perl 1649
wireghoul / graudit
grep rough audit - source code auditing tool
security shell vulnerability-detection source-code security-audit security-tools
Language:Shell 1646
aquasecurity / trivy-operator
Kubernetes-native security toolkit
cloud-native golang kubernetes operator security misconfiguration octoberfest vulnerability-detection vulnerability-scanners security-tools
Language:Go 1623
0xricksanchez / paper_collection
Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read
directed-fuzzing embedded exploitation fuzzing fuzzing-binaries guided-fuzzing hybrid-fuzzing iot kernel linux linux-kernel mitigations paper rca root-cause sanitizer vulnerability-detection
Language:Python 1293
Lucifer1993 / SatanSword
红队综合渗透框架
vulnerability-scanners security-tools fingerprinting poc pentest-tool vulnerability-detection
Language:Python 1179
Open-Source-Security-Guide
mikeroyal / Open-Source-Security-Guide
Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.
vulnerabilities vulnerability-detection privacy-protection pentesters network-analysis intrusion-detection infosec incident-management mitre-attack detection-engineering kali-linux offensive-security information-security siem compliance cyber-security scanning-tool incident-response forensics-tools surveillance
Language:Go 1007
bitquark / shortscan
An IIS short filename enumeration tool
bugbounty security security-audit security-scanner security-tools iis iis-server pentesting pentesting-tools vulnerability-detection vulnerability-scanners iis-security redteam redteam-tools security-automation bugbounty-tool
Language:Go 1000
toolswatch / vFeed
The Correlated CVE Vulnerability And Threat Intelligence Database API
cve oval threat-intelligence-database python vfeed cwe capec scap vulnerability-databases vulnerability-detection vulnerability-database-entry vulnerability-identification threat intelligence-gathering exploits vulnerability vulnerability-scanners common-vulnerability-exposure threat-intelligence threatintel
Language:Python 948
wazuh / wazuh-docker
Wazuh - Docker containers
wazuh docker ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch security-hardening log-analysis ids pci-dss file-integrity-management security-awareness vulnerability-detection incident-response hacktoberfest hacktoberfest-accepted
Language:Shell 906
seccubus / seccubus
Easy automated vulnerability scanning, reporting and analysis
seccubus repeated-scans nikto ssllabs security filters analysis vulnerability-detection vulnerability-management medusa nessus nmap testssl
Language:JavaScript 702