vulnerability-assessment
There are 251 repositories under vulnerability-assessment topic.
projectdiscovery/nuclei
Fast and customizable vulnerability scanner based on simple YAML based DSL.
The-Art-of-Hacking/h4cker
This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.
CISOfy/lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
future-architect/vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
ysrc/xunfeng
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
scipag/vulscan
Advanced vulnerability scanning with Nmap NSE
evyatarmeged/Raccoon
A high performance offensive security tool for reconnaissance and vulnerability scanning
greenbone/openvas-scanner
This repository contains the scanner component for Greenbone Community Edition.
cve-search/cve-search
cve-search - a tool to perform local searches for known vulnerabilities
archerysec/archerysec
ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.
anouarbensaad/vulnx
vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.
skavngr/rapidscan
:new: The Multi-Tool Web Vulnerability Scanner.
Moham3dRiahi/XAttacker
X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter
felixgr/secure-ios-app-dev
Collection of the most common vulnerabilities found in iOS applications
olacabs/jackhammer
Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.
m0nad/HellRaiser
Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.
frizb/Vanquish
Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.
SkyLined/BugId
Detect, analyze and uniquely identify crashes in Windows applications
PaytmLabs/nerve
NERVE Continuous Vulnerability Scanner
we1h0/SecurityManageFramwork
Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.
flipkart-incubator/watchdog
Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.
sethsec/celerystalk
An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.
mageni/mageni
Open-source vulnerability scanner
Martyx00/VulnFanatic
A Binary Ninja plugin for vulnerability research.
greenbone/gsa
Greenbone Security Assistant - The web frontend for the Greenbone Community Edition
VainlyStrain/Vailyn
A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python
softrams/bulwark
An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.
InfoSecWarrior/Offensive-Payloads
List of payloads and wordlists that are specifically crafted to identify and exploit vulnerabilities in target web applications.
greenbone/gvm-tools
Remote control your Greenbone Community Edition or Greenbone Enterprise Appliance
OWASP/ASST
OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.
target/portauthority
API that leverages Clair to scan Docker Registries and Kubernetes Clusters for vulnerabilities
Rezilion/mi-x
Determine whether your compute is truly vulnerable to a specific vulnerability by accounting for all factors which affect *actual* exploitability (runtime execution, configuration, permissions, existence of a mitigation, OS, etc..)
lucideus-repo/UnSAFE_Bank
Vulnerable Banking Suite
intrigueio/intrigue-ident
Application and Service Fingerprinting
google/minions
Distributed filesystem scanner