巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
- security
- pentesting
- infosec
- exploits
Repository Index
71,372 visible repositories in the index
25–48 of 74 · Most stars
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
- security
- python3
- tools
- apk
Wifite but USB-only & cross-platform.
- cross-platform
- userland
- wifi-scanner
- wifi-security
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。
- scanner
- scanner-web
- dirscanner
- pentest-tool
File upload vulnerability scanner and exploitation tool.
- python3
- pentesting
- exploitation
- takeover
Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.
- webpack
- scanner
- python3
- cybersecurity
Security scanner for AI agents, MCP servers and agent skills.
🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.
- osint
- python
- recon
- framework
Security Scanner for Agent Skills
Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network
- cloudflare
- tor
- ip
- database
CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs
- cms
- content-management-system
- cms-framework
- wordpress
Scan, index, and archive all of your paper documents (acquired by Mayan EDMS)
High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)
A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers
利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点
- poc
- vulnerability-scanner
- poc-bomber
- cve
Striker is an offensive information and vulnerability scanner.
- cloudflare
- information-gathering
- recon
- theharvester
Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.
- bypass-cloudflare
- bypass-hostname
- bypass-waf
- dnssec
A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
- oscp
- penetration-testing
- scanner
- security
vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.
- crawler
- information-gathering
- cms-detector
- cloudflare-detection
:new: The Multi-Tool Web Vulnerability Scanner.
- scanner
- vulnerability-scanners
- scanner-web
- web-vulnerabilities-scanner
Find web directories without bruteforce
- pentesting
- security
- security-tools
- websec