Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Repository Index
71,372 visible repositories in the index
1–23 of 23 · Most stars
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- cve-scanner
- subdomain-takeover
- nuclei-engine
- vulnerability-detection
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
- fscan
- scanner
- scanning
- sec
A vulnerability scanner for container images and filesystems
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
- vuls
- vulnerability-scanners
- golang
- go
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
- attack
- auto
- golang
- hacker
Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.
- golang
- package-inventory
- supply-chain-security
A Security Tool for Bug Bounty, Pentest and Red Teaming.
- vulnerability-scanner
- poc
- penetration-testing
- afrog
TranslatedKscan is an all-round scanner developed purely in Go, with features such as port scanning, protocol detection, fingerprint recognition, and brute-force cracking. It supports 1,200+ protocols, 10,000+ protocol fingerprints, 20,000+ application fingerprints, and more than 10 brute-force cracking protocols.
- redteam
- scanner
- bruteforce
- brute-force
🔍 Search anyone's digital footprint across 300+ websites
- digital-footprint
- digital-footprint-lookup
- osint
- osint-framework
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
Scan for misconfigured S3 buckets across S3-compatible APIs!
Open source vulnerability DB and triage service.
- security
- security-tools
- vulnerability-scanners
- vulnerability-management
Pre-submission compliance scanner for the Apple App Store and Google Play. Scans code, privacy manifests, Android manifests, and IPA/APK/AAB binaries against the review guidelines. Offline, no account.
The Swiss Army knife for automated Web Application Testing
- golang
- hacking
- bugbounty
- jaeles
ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
- bugbounty
- bugbounty-tool
- crawler
- dirscanner
Hacker tools on Go (Golang)
- go
- golang
- hack
- tools
Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点
- identification
- security-tools
- webscan
- golang-tools
Discover internet-wide misconfigurations while drinking coffee
- cybersecurity
- scanner
- golang
- osint
Read-only, local-first cloud security scanner for AWS, Azure and GCP. Your scan data stays on your machine.
simple YARA-based IOC scanner
- yara
- ioc
- security
- incident-response
Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.
- aho-corasick
- cybersecurity
- devops
- git-hook