Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Repository Index
58,136 visible repositories in the index
1–24 of 27 · Most stars
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- cve-scanner
- subdomain-takeover
- nuclei-engine
- vulnerability-detection
A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.
- built-at-rc
- age-encryption
Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
- fscan
- scanner
- scanning
- sec
A vulnerability scanner for container images and filesystems
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
- vuls
- vulnerability-scanners
- golang
- go
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
- kubernetes
- security
- nsa
- mitre-attack
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Vulnerability Static Analysis for Containers
☁️ The Most Secure and Easy Selfhosted Home Server. Take control of your data and privacy without sacrificing security and stability (Authentication, anti-DDOS, anti-bot)
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
- attack
- auto
- golang
- hacker
📦 Make security testing of K8s, Docker, and Containerd easier.
- penetration
- penetration-testing-tools
- kubernetes
- docker
A Security Tool for Bug Bounty, Pentest and Red Teaming.
- vulnerability-scanner
- poc
- penetration-testing
- afrog
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
BKN Foundry is the Ontology back-end foundation of OpenBKN. It transforms ontology-driven business semantics into runtime services: data, logic, actions, security governance, and observability.
- ontology
- ontology-engineering
- ontology-platform
- opensource-ontology-platform
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids
gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that you can join on Google Groups: https://groups.google.com/forum/#!topic/gonids/
- suricata
- parse
- security-tools
- network-security
A Highly Accessible and Automated Virtualization Platform for Security Education
- cybersecurity
- virtualization
- docker
- virtualbox
The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
Go client for the GeoServer REST API — workspaces, datastores, layers, styles, security, ACL, GeoWebCache, Importer, plus OWS GetCapabilities/Describe. Tested against GeoServer 2.27 LTS and 2.28 stable.
- geoserver
- gis
- mapping
- golang
Password generator written in Golang, usable as a CLI or Go library. Provides options for human readable and accessibility friendly passwords.
- golang
- go
- go-library
- golang-library
K8s API Honeypot with Active Defense Capabilities
- never
- going
- to
- give