Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
- security
- compliance
- log-analysis
- vulnerability-detection
Repository Index
69,259 visible repositories in the index
1–24 of 29 · Most stars
The ZAP by Checkmarx Core project
- zap
- zap-development
- dast
- appsec
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
- vuls
- vulnerability-scanners
- golang
- go
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
- kubernetes
- security
- nsa
- mitre-attack
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potential vulnerabilities. Bjorn can perform brute force attacks, file stealing, host zombification, and supports custom attack scripts.
- automated-pentesting
- bruteforce
- cybersecurity
- e-paper
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
- attack
- auto
- golang
- hacker
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
- python
- penetration-testing
- penetration-testing-framework
- owasp
Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)或方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等，大量高危漏洞检测模块MS17010、Zimbra、Exchange
Open Source Cloud Native Application Protection Platform (CNAPP)
- cloud-native
- vulnerability-management
- threat-analysis
- devsecops
w3af: web application attack and audit framework, the open source web vulnerability scanner.
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
- security
- pentesting
- security-tools
- python
巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。
- security
- pentesting
- infosec
- exploits
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228
Open source vulnerability DB and triage service.
- security
- security-tools
- vulnerability-scanners
- vulnerability-management
Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.
cve-search - a tool to perform local searches for known vulnerabilities
- cve-search
- common-vulnerabilities
- cpe
- cve-databases
CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs
- cms
- content-management-system
- cms-framework
- wordpress
ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.
- vulnerability-assessment
- vulnerabilities
- scanning
- pentesting
Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.
- ai
- bug-bounty
- bugbounty-tools
- security-research
The open-source cybersecurity harness. Includes a web interface for code analysis, pentesting, vulnerability research, reverse engineering, verification, and fixing + CLI and MCP for agents.
- llm-agents
- security-research
- security-tools
- application-security
Protect against malicious open source packages 🤖
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
- application-security
- appsec
- bug-bounty
- burp-alternative