security-audit

There are 878 repositories under security-audit topic.

  • cset

    Cybersecurity Evaluation Tool

    Language:TSQL1.3k
  • ssh-mitm

    ssh-mitm

    SSH-MITM - ssh audits made simple

    Language:Python1.2k

  • golang-tls

    Simple Golang HTTPS/TLS Examples

    1.2k
  • sysreptor

    sysreptor

    Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

    Language:Python1.2k

  • pythem

    pentest framework

    Language:Python1.2k

  • VHostScan

    A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

    Language:Python1.2k

  • repo-security-scanner

    CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys

    Language:Go1.1k

  • cs-suite

    Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

    Language:Shell1.1k

  • enum4linux-ng

    A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

    Language:Python1k

  • wordpress-exploit-framework

    A Ruby framework designed to aid in the penetration testing of WordPress systems.

    Language:Ruby1k

  • jok3r

    Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

    Language:HTML998

  • kubestriker

    A Blazing fast Security Auditing tool for Kubernetes

    Language:Python979

  • ApkAnalyser

    一键提取安卓应用中可能存在的敏感信息。

    Language:Shell939

  • pip-audit

    Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

    Language:Python933

  • ossa

    Open-Source Security Architecture | 开源安全架构

    926

  • nfcgate

    An NFC research toolkit application for Android

    Language:Java921

  • dep-scan

    OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

    Language:Python909
  • npq

    npq

    🎖safely* install packages with npm or yarn by auditing them as part of your install process

    Language:JavaScript880

  • advisory-db

    Security advisory database for Rust crates published through crates.io

    878
  • cli

    cli

    The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.

    Language:TypeScript874
  • ElectricEye

    ElectricEye

    ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks

    Language:Python874

  • GourdScanV2

    被动式漏洞扫描系统

    Language:Python870

  • cansina

    Web Content Discovery Tool

    Language:Python867
  • habu

    habu

    Hacking Toolkit

    Language:Python864

  • Web-Cache-Vulnerability-Scanner

    Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

    Language:Go811

  • RockYou2021.txt

    RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!

    809

  • skf-flask

    Security Knowledge Framework (SKF) Python Flask / Angular project

    Language:HTML807
  • kube-scan

    kube-scan

    kube-scan: Octarine k8s cluster risk assessment tool

    Language:Go789

  • SQLiScanner

    Automatic SQL injection with Charles and sqlmap api

    Language:Python784
  • Smart-Contract-Security-Audits

    Smart-Contract-Security-Audits

    Certified Smart Contract Audits for Ethereum, Solana, Near, Cardano, Aptos, Sui, Binance Smart Chain, Fantom, EOS, Tezos by softstack (formerly Chainsulting)

    Language:HTML760

  • dawnscanner

    Dawn is a static analysis security scanner for ruby written web applications. It supports Sinatra, Padrino and Ruby on Rails frameworks.

    Language:Ruby732

  • betterscan-ce

    Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners + OpenAI GPT with One Report (Code, IaC) - Betterscan Community Edition (CE)

    Language:Python728

  • linux_kernel_cves

    Tracking CVEs for the linux Kernel

    Language:Vue727

  • KubeHound

    Kubernetes Attack Graph

    Language:Go685

  • dradis-ce

    Dradis Framework: Collaboration and reporting for IT Security teams

    Language:Ruby645

  • packj

    Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

    Language:Python623