Repository Index

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

• security
• security-tools
• docker
• containers

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

• cve-scanner
• subdomain-takeover
• nuclei-engine
• vulnerability-detection

An open source trusted cloud native registry project that stores, signs, and scans content.

• cncf
• container
• registry
• helm

Find, verify, and analyze leaked credentials

• secret
• trufflehog
• credentials
• security

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

• fscan
• scanner
• scanning
• sec

A vulnerability scanner for container images and filesystems

• containers
• security
• vulnerability
• docker

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

• vuls
• vulnerability-scanners
• golang
• go

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

• kubernetes
• security
• nsa
• mitre-attack

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

• scanner
• security-audit
• security-tools
• vulnerability-scanner

:zap: Transfer files over wifi from your computer to your mobile device by scanning a QR code without leaving the terminal.

• utility
• golang
• qrcode
• cli

Lightweight network IP scanner written in Go. With notifications, history, export to Grafana

• arp-scan
• self-hosted
• selfhosted
• arp-scanner

Tfsec is now part of Trivy

• terraform
• security
• scanner
• static-analysis

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

• scanning-tool
• secret-keys
• secrets-management
• infosectools

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

• appsec
• compliance
• devsecops
• devsecops-tools

Library for scanning data from a database into Go structs and more

• go
• golang
• database
• sql

Finala is an open-source resource cloud scanner that analyzes, discloses, presents and notifies about wasteful and unused resources.

• aws
• go
• cloud
• aws-billing

Parser / Scanner Generator

Tiny lib to scan SQL rows directly to structs, slices, and primitive types

• golang
• sql
• database
• scanning

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

• sast
• security-tools
• security-scanner
• security-automation

EOS.IO Go API library

• eos
• eosio
• blockchain
• golang

TUI macOS cleaner that scans caches/logs, shows sizes/paths, lets you select what to delete before Trash.

• cleanup
• macos
• caches
• clean

Discover internet-wide misconfigurations while drinking coffee

• cybersecurity
• scanner
• golang
• osint

TranslatedPacket monster (っ‘-’)╮=͟͟͞͞◒ ヽ( '-'ヽ) TUI tool for sending packets of arbitrary input and monitoring packets on any network interfaces (default: eth0). Windows/macOS/Linux

• packet-generator
• packet-analyzer
• network
• networking

TranslatedA code audit platform built as a secondary development of artex | Adds local decompilation of Java dependency libraries | Multi-account management