A modular vulnerability scanner with automatic report generation capabilities.
- artemis
- pentesting
- security
- security-scanner
47,133 repositories indexed
49–72 of 106 · Most stars
A modular vulnerability scanner with automatic report generation capabilities.
🍯 Unobtrusive and flexible spam protection for Rails apps
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
Extract and aggregate threat intelligence.
Customizable Linux Persistence Tool for Security Research and Detection Engineering.
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
Use Apple FaceID or TouchID authentication in your app using BiometricAuthentication.
Script to create templates to use with VirtualBox to make vm detection harder
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
Scirius is a web application for Suricata ruleset management and threat hunting.
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
WinDBG Anti-RootKit Extension
Automated Attack Simulation in the Cloud, complete with detection use cases.
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
Collection of example YARA-L rules for use within Google Security Operations
Built-in Panther detection rules and policies
Drltrace is a library calls tracer for Windows and Linux applications.
A framework for automated extraction of static and dynamic features from Android applications
Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.
Splunk code (SPL) for serious threat hunters and detection engineers.
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
Android Mobile Device Hardening