47,133 repositories indexed
1–17 of 17 · Most stars
FOSSology is an open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the command line. As a system, a database and web ui are provided to give you a compliance workflow. License, copyright and export scanners are tools used in the workflow.
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
Scan a QR code in the terminal using the system camera or a given image
📈 Command line tool written in Go. It allows developers to scan their local Git repositories and generate a visual contributions graph.
Cross-platform EOSIO command-line swiss-army-knife (EOS, BOS, Telos, Worbli, etc.)
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
Pure-Go SQL parser, formatter, linter and security scanner for 8 dialects. Zero-copy, race-free, with an LSP and MCP server.
Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.
Data logistics system enabling real-time pathogen surveillance. Built for the Seattle Flu Study.
Solution based on either Powershell or Power Automate (Flow) to consume the recently released Power BI Asynchronous Unified Scanning API
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
Very simple but effective honeypot to detect port scanning on your network
Real macOS WiFi data for Go: scan unredacted SSIDs/BSSIDs and read saved WiFi passwords with user-approved macOS prompts.
Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.
Open-source PocketBase security auditor: detects empty rules, the @request.auth.id != trap, true literals. Active probe confirms leaks live.
Detect CVE-2025-55182 (React2Shell) RCE vulnerability in React Server Components. Fast, accurate scanner with zero false positives.