vulnerability-detection

There are 87 repositories under vulnerability-detection topic.

aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
containers devsecops docker go golang hacktoberfest iac infrastructure-as-code kubernetes misconfiguration security security-tools vulnerability vulnerability-detection vulnerability-scanners
Language:Go 21338
projectdiscovery / nuclei
Fast and customizable vulnerability scanner based on simple YAML based DSL.
attack-surface cve-scanner hacktoberfest nuclei-engine security security-scanner subdomain-takeover vulnerability-assessment vulnerability-detection vulnerability-scanner
Language:Go 17209
CISOfy / lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
shell linux pci-dss compliance security-audit security-hardening security-scanner security-vulnerability hipaa unix vulnerability-detection vulnerability-scanners vulnerability-assessment devops devops-tools system-hardening hardening auditing gdpr security-tools
Language:Shell 12506
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
administrator cybersecurity freebsd go golang linux security security-audit security-automation security-hardening security-scanner security-tools security-vulnerability vulnerabilities vulnerability-assessment vulnerability-detection vulnerability-management vulnerability-scanner vulnerability-scanners vuls
Language:Go 10664
kubescape
kubescape / kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
kubernetes security nsa mitre-attack devops best-practice vulnerability-detection
Language:Go 9694
wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
cloud-security compliance configuration-assessement container-security cybersecurity file-integrity-monitoring incident-response infosec log-analysis malware-detection pci-dss security security-audit security-automation security-hardening security-tools siem vulnerability-detection wazuh xdr
Language:C 9153
projectdiscovery / nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
bugbounty exploit-development exploits fingerprint hacktoberfest nuclei nuclei-checks nuclei-templates security vulnerability-detection
Language:JavaScript 8041
jeremylong / DependencyCheck
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
security-audit build-tool maven-plugin jenkins-plugin gradle-plugin vulnerability-detection security ant-task software-composition-analysis
Language:Java 5870
GhostTroops / scan4all
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
attack auto golang hacker tools nuclei bugbounty bugbounty-tools hacktools pentest-tool 0day brute-force nmap ssh vulnerabilities-scan recon security-scanner security-tools vulnerability-detection vulnerability-scanners
Language:Go 5231
ThreatMapper
deepfence / ThreatMapper
Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more.
cloud-native cloudsecurity cnapp compliance containers cspm cwpp devops devsecops hacktoberfest kubernetes observability registry-scanning scanning-tool secops security-tools threat-analysis vulnerability-detection vulnerability-management vulnerability-scanners
Language:TypeScript 4632
Arachni / arachni
Web Application Security Scanner Framework
arachni dom ruby audit detection security-audit analysis modular javascript scanners web-application vulnerability-detection crawler scanner hack hacking penetration-testing xss sql-injection
Language:Ruby 3641
ysrc / xunfeng
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
security pentesting infosec exploits security-audit vulnerability-detection scanner vulnerability-assessment vulnerability-scanners
Language:Python 3498
scipag / vulscan
Advanced vulnerability scanning with Nmap NSE
vulnerability vulnerability-scanners vulnerability-detection vulnerability-identification vulnerability-assessment security security-audit security-scanner penetration-testing nmap nmap-scripts exploit vulnerability-scanning vulnerability-databases vulnerability-database-entry nmap-scan-script nse nsescript lua lua-script
Language:Lua 3317
greenbone / openvas-scanner
This repository contains the scanner component for Greenbone Community Edition.
openvas vulnerability vulnerability-scanners vulnerability-detection vulnerability-assessment scanner vulnerability-management greenbone greenbone-vulnerability-management gvm openvas-scanner greenbone-community-edition foo c techops
Language:C 2877
dependency-track
DependencyTrack / dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
owasp appsec security bom vulnerabilities component-analysis nvd software-security software-composition-analysis sca bill-of-materials vulndb package-url purl vulnerability-detection ossindex sbom devsecops security-automation cyclonedx
Language:Java 2322
cve-search / cve-search
cve-search - a tool to perform local searches for known vulnerabilities
cve-search common-vulnerabilities cpe cve-databases vulnerabilities vulnerability-detection vulnerability-assessment cve cve-scanning cve-entries
Language:Python 2197
Checkmarx / kics
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
iac infrastructure-as-code security appsec cloudnative hacktoberfest devsecops golang security-tools vulnerability-detection vulnerability-scanners open-policy-agent
Language:Open Policy Agent 1890
anouarbensaad / vulnx
vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.
crawler information-gathering cms-detector cloudflare-detection bot pentest wp-scanner auto-exploiter vulnerability hacking website-vulnerability-scanner security-tools vulnerability-assessment vulnerability-exploit vulnerability-detection shell-injection detects-vulnerabilities exploits dorks subdomains-gathering
Language:Python 1827
0xInfection / TIDoS-Framework
The Offensive Manual Web Application Penetration Testing Framework.
enumeration exploitation footprinting intelligence-gathering osint reconnaissance scanning-enumeration tidos-framework vulnerability-analysis vulnerability-detection web-application-security web-fuzzer web-penetration-testing
Language:Python 1732
skavngr / rapidscan
:new: The Multi-Tool Web Vulnerability Scanner.
scanner vulnerability-scanners scanner-web web-vulnerabilities-scanner security-tools security-scanner penetration-testing-framework penetration-testing vulnerability-assessment vulnerability-scanner vulnerability-management oscp vulnerability-detection kali-scripts kali-linux vulnerabilities security-scanning offensive-security enumeration reconnaissance
Language:Python 1650
pyupio / safety
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
python security security-vulnerability travis vulnerability-detection vulnerability-scanners
Language:Python 1627
wagiro / BurpBounty
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.
bugbounty burp-extensions burpsuite bug-bounty vulnerability-scanner vulnerability-detection
Language:Java 1618
top25-parameter
lutfumertceylan / top25-parameter
For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙
vulnerability-detection vulnerability-research bugbounty pentesting pentest-tool bugbountytips security infosec xss-detection
1603
murphysecurity / murphysec
An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。
security scanner dependency vulnerability-detection software-supply-chain sca software-composition-analysis codescan
Language:Go 1571
metlo-labs / metlo
Metlo is an open-source API security platform.
security api-gateway api-security application-security cybersecurity monitoring vulnerabilities vulnerability-detection metlo infosec api-pentest aws bugbounty bugbounty-tools infosectools pentest
Language:TypeScript 1567
XAttacker
Moham3dRiahi / XAttacker
X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
vulnerability-scanner vulnerability-detection vulnerability-exploit vulnerability-assessment security-scanner scanner security-tools website-vulnerability-scanner hacking hacking-tool pentest wp-scanner wordpress prestashop joomla lokomedia drupal auto-exploiter exploit exploitation
Language:Perl 1495
wireghoul / graudit
grep rough audit - source code auditing tool
security shell vulnerability-detection source-code security-audit security-tools
Language:Shell 1362
0xricksanchez / paper_collection
Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read
fuzzing paper exploitation linux kernel mitigations iot embedded linux-kernel sanitizer vulnerability-detection fuzzing-binaries guided-fuzzing directed-fuzzing hybrid-fuzzing rca root-cause
1177
Lucifer1993 / SatanSword
红队综合渗透框架
vulnerability-scanners security-tools fingerprinting poc pentest-tool vulnerability-detection
Language:Python 1145
aquasecurity / trivy-operator
Kubernetes-native security toolkit
cloud-native golang kubernetes operator security misconfiguration octoberfest vulnerability-detection vulnerability-scanners security-tools
Language:Go 1038
toolswatch / vFeed
The Correlated CVE Vulnerability And Threat Intelligence Database API
cve oval threat-intelligence-database python vfeed cwe capec scap vulnerability-databases vulnerability-detection vulnerability-database-entry vulnerability-identification threat intelligence-gathering exploits vulnerability vulnerability-scanners common-vulnerability-exposure threat-intelligence threatintel
Language:Python 924
Open-Source-Security-Guide
mikeroyal / Open-Source-Security-Guide
Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.
vulnerabilities vulnerability-detection privacy-protection pentesters network-analysis intrusion-detection infosec incident-management mitre-attack detection-engineering kali-linux offensive-security information-security siem compliance cyber-security scanning-tool incident-response forensics-tools surveillance
Language:Go 851
seccubus / seccubus
Easy automated vulnerability scanning, reporting and analysis
seccubus repeated-scans nikto ssllabs security filters analysis vulnerability-detection vulnerability-management medusa nessus nmap testssl
Language:JavaScript 692
bahaabdelwahed / killshot
A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner
vulnerability-scanner vulnerability-detection exploit wp-admin joomla wordpress website-vulnerability-scanner auto-scanner spider information-gathering cms webapp-vul-scanner vulnerability
Language:Ruby 613
Patrowl / PatrowlManager
PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform
automation orchestration secops patrowl incident-response api security-tools vulnerability-management security-automation security-scanner vulnerability-scanners vulnerability-detection threat-intelligence threat-hunting ioc thehive vulnerabilities scans
Language:HTML 609
wazuh / wazuh-docker
Wazuh - Docker containers
compliance docker elasticsearch file-integrity-management hacktoberfest hacktoberfest-accepted ids incident-response intrusion-detection log-analysis loganalyzer monitoring ossec pci-dss policy-monitoring security security-awareness security-hardening vulnerability-detection wazuh
Language:Shell 571