Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Web path scanner
Exploitation Framework for Embedded Devices
fsociety Hacking Tools Pack – A Penetration Testing Framework
The recursive internet scanner for hackers. 🧡
the LLM vulnerability scanner
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Bandit is a tool designed to find common security issues in Python code.
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
- network-security
- selfhosted
- wifi-network
- wifi-security
Scanning APK file for URIs, endpoints & secrets.
Automated Αll-in-One OS command injection exploitation tool.
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
- phishing
- typosquatting
- domains
- dns
w3af: web application attack and audit framework, the open source web vulnerability scanner.
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
A high performance offensive security tool for reconnaissance and vulnerability scanning
Loki - Simple IOC and YARA Scanner
- python
- yara
- signature
- scanner
Automated NoSQL database enumeration and web application exploitation tool.
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
Tool to scan for secret files on HTTP servers
Find web directories without bruteforce
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
A modular vulnerability scanner with automatic report generation capabilities.
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.