Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Repository Index
59,621 visible repositories in the index
25–48 of 186 · Most stars
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
Vulnerability Static Analysis for Containers
the LLM vulnerability scanner
- ai
- llm-evaluation
- llm-security
- security-scanners
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]
The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵
- pentesting-tools
- vulnerability-scanners
- redteam-tools
- penetration-testing
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
- java
- deserialization
- gadget
- exploit
Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.
Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Gather and update all available and newest CVEs with their PoC.
- poc
- cve
- cve-poc
- latest-cve
📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
Trail of Bits skills for security research, vulnerability detection, and audit workflows
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
- security-audit
- build-tool
- maven-plugin
- jenkins-plugin
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
Collection of methodology and test case for various web vulnerabilities.
- vulnerability
- tutorials
- bughunting-methodology
- bugbounty
A list of web application security
- penetration-testing
- web-hacking
- vulnerabilities
- scanner
TranslatedDeepAudit: An AI hacker team for everyone, putting vulnerability discovery within reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing + automated sandbox PoC verification. Supports private deployment with Ollama and one-click report generation. Supports relay stations. Making security no longer expensive and auditing no longer complicated.
- ai
- bug-detection
- code-audit
- code-quality
A static analysis security vulnerability scanner for Ruby on Rails applications
- ruby
- rails
- security
- static-analysis
Open device management
- osquery
- gitops
- device-management
- vulnerability-management
Tfsec is now part of Trivy
- terraform
- security
- scanner
- static-analysis
All about bug bounty (bypasses, payloads, and etc)
- bugbounty
- bugbountytips
- bypass
- payloads
An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.