vulnerability-scanners
There are 808 repositories under vulnerability-scanners topic.
aquasecurity/trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
CISOfy/lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
future-architect/vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
We5ter/Scanners-Box
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
aquasecurity/tfsec
Tfsec is now part of Trivy
promptfoo/promptfoo
Test your prompts, agents, and RAGs. Red teaming, pentesting, and vulnerability scanning for LLMs. Compare performance of GPT, Claude, Gemini, Llama, and more. Simple declarative configs with command line and CI/CD integration.
GhostTroops/scan4all
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
infobyte/faraday
Open Source Vulnerability Management Platform
deepfence/ThreatMapper
Open Source Cloud Native Application Protection Platform (CNAPP)
charles2gan/GDA-android-reversing-Tool
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
mitchellkrogza/nginx-ultimate-bad-bot-blocker
Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
OWASP/Nettacker
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
greenbone/openvas-scanner
This repository contains the scanner component for Greenbone Community Edition.
scipag/vulscan
Advanced vulnerability scanning with Nmap NSE
ysrc/xunfeng
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
deepfence/SecretScanner
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
e-m-b-a/emba
EMBA - The firmware security analyzer
Checkmarx/kics
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
skavngr/rapidscan
:new: The Multi-Tool Web Vulnerability Scanner.
pyupio/safety
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
google/osv.dev
Open source vulnerability DB and triage service.
v3n0m-Scanner/V3n0M-Scanner
Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
AlisamTechnology/ATSCAN
Advanced dork Search & Mass Exploit Scanner
Lucifer1993/AngelSword
Python3编写的CMS漏洞检测框架
aquasecurity/trivy-operator
Kubernetes-native security toolkit
jweny/pocassist
傻瓜式漏洞PoC测试框架
Lucifer1993/struts-scan
Python2编写的struts2漏洞全版本检测和利用工具
c0ny1/passive-scan-client
Burp被动扫描流量转发插件
4ra1n/super-xray
Web漏洞扫描工具XRAY的GUI启动器
arch3rPro/PentestTools
Awesome Pentest Tools Collection
dwisiswant0/go-dork
The fastest dork scanner written in Go.
Lucifer1993/SatanSword
红队综合渗透框架
OWASP/joomscan
OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/
hacktoolspack/hack-tools
hack tools
owasp-dep-scan/dep-scan
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
chenjj/CORScanner
🎯 Fast CORS misconfiguration vulnerabilities scanner