Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Repository Index
47,133 repositories indexed
1–24 of 190 · Most stars
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
- cve-scanner
- subdomain-takeover
- nuclei-engine
- vulnerability-detection
An open source trusted cloud native registry project that stores, signs, and scans content.
Find, verify, and analyze leaked credentials
- secret
- trufflehog
- credentials
- security
DNS-Blocklists: For a better internet - keep the internet clean!
- dns
- ads
- blacklist
- blocklist
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- agent-security
- agent-skills
- agentic-ai
- ai-security
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
A powerful obfuscator for JavaScript and Node.js
- javascript-obfuscator
- obfuscation
- uglify
- javascript
The ZAP by Checkmarx Core project
- zap
- zap-development
- dast
- appsec
Most advanced XSS scanner.
- xss
- xss-scanner
- xss-exploit
- xss-bruteforce
Affordable WiFi hacking platform for testing and learning
Web path scanner
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
- fscan
- scanner
- scanning
- sec
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
- identity
- identity-management
- user-management
- users
Exploitation Framework for Embedded Devices
A vulnerability scanner for container images and filesystems
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
fsociety Hacking Tools Pack – A Penetration Testing Framework
- fsociety
- exploitation
- port-scanning
- fsociety-hacking
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
- vuls
- vulnerability-scanners
- golang
- go
Program for determining types of files for Windows, Linux and MacOS.
- debugger
- detect
- unpacker
- disassembler
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
- kubernetes
- security
- nsa
- mitre-attack