Hunt for security weaknesses in Kubernetes clusters
- vulnerabilities
- kubernetes-clusters
- hacktoberfest
Repository Index
60,121 visible repositories in the index
73–96 of 189 · Most stars
This repository contains the scanner component for Greenbone Community Edition.
- openvas
- vulnerability
- vulnerability-scanners
- vulnerability-detection
w3af: web application attack and audit framework, the open source web vulnerability scanner.
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
- decompiler
- vulnerability-scanners
- malware-analysis
- security-audit
Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
A PoC that exploits a vulnerability to bypass the Xiaomi HyperOS community restrictions of BootLoader unlocked account bindings.
- android
- android-development
- bootloader
- bootloader-unlock
📦 Make security testing of K8s, Docker, and Containerd easier.
- penetration
- penetration-testing-tools
- kubernetes
- docker
Tools and Techniques for Blue Team / Incident Response
- blue-team
- blueteam
- cheatsheet
- incident-response
A Security Tool for Bug Bounty, Pentest and Red Teaming.
- vulnerability-scanner
- poc
- penetration-testing
- afrog
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
- weblogic
- tomcat
- exploit
- poc
Mythril is a symbolic-execution-based securty analysis tool for EVM bytecode. It detects security vulnerabilities in smart contracts built for Ethereum and other EVM-compatible blockchains.
- security-analysis
- ethereum
- blockchain
- smart-contracts
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
- vulnerabilities
- scanner
- firefox-extension
- grunt-plugins
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
- malware
- virustotal
- malpedia
- urlhaus
面向网络安全从业者的知识文库🍃 (停止更新)
- cve
- 1day
- 0day
- vuln
A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
Reptar, Downfall, Zenbleed, ZombieLoad, RIDL, Fallout, Foreshadow, Spectre, Meltdown vulnerability/mitigation checker for Linux & BSD
- mitigation
- meltdown
- spectre
- cve-2017-5753
An step by step fuzzing tutorial. A GitHub Security Lab initiative
基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
- security
- pentesting
- security-tools
- python
😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.
- penetration-testing
- hacking
- learning-hacking
- web-hacking
All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
- scanner
- crawler
- information-gathering
- admin-scanner
Advanced vulnerability scanning with Nmap NSE
- vulnerability
- vulnerability-scanners
- vulnerability-detection
- vulnerability-identification
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool