Repository Index

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

• security
• security-tools
• docker
• containers

ZXing ("Zebra Crossing") barcode scanning library for Java, Android

• java
• android
• barcode
• barcode-scanner

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

• cve-scanner
• subdomain-takeover
• nuclei-engine
• vulnerability-detection

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

• llm
• prompt-engineering
• prompts
• llmops

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

• agent-security
• agent-skills
• agentic-ai
• ai-security

🤖 The Modern Port Scanner 🤖

• security
• pentesting
• hacking
• port

Ajax for Node.js and browsers (JS HTTP client). Maintained for @forwardemail, @ladjs, @spamscanner, @breejs, @cabinjs, and @lassjs.

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

• shell
• linux
• pci-dss
• compliance

The ZAP by Checkmarx Core project

• zap
• zap-development
• dast
• appsec

🖼️ Image Toolbox is a powerful app for advanced image manipulation. It offers dozens of features, from basic tools like crop and draw to filters, OCR, and a wide range of image processing options

• jetpack-compose
• kotlin
• android
• material-you

Most advanced XSS scanner.

• xss
• xss-scanner
• xss-exploit
• xss-bruteforce

Web path scanner

• fuzzer
• fuzzing
• python
• security

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

• fscan
• scanner
• scanning
• sec

🕷 Super-agent driven library for testing node.js HTTP servers using a fluent API. Maintained for @forwardemail, @ladjs, @spamscanner, @breejs, @cabinjs, and @lassjs.

• supertest
• superagent
• assertions
• node

Nmap - the Network Mapper. Github mirror of official SVN repository.

• c-plus-plus
• lua
• security
• port-scanner

Exploitation Framework for Embedded Devices

• python
• security
• infosec
• router-exploitation-framework

A vulnerability scanner for container images and filesystems

• containers
• security
• vulnerability
• docker

A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32

• esp32
• arduino
• firmware
• wifi

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

• vuls
• vulnerability-scanners
• golang
• go

Program for determining types of files for Windows, Linux and MacOS.

• debugger
• detect
• unpacker
• disassembler

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

• security
• vulnerability
• vulnerability-scanner
• passive-vulnerability-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

• scanner
• security-audit
• security-tools
• vulnerability-scanner

The recursive internet scanner for hackers. 🧡

• hacking
• neo4j
• osint
• osint-framework