Ranked by Attention Score: stars gained over the last 7 complete days
18 repositories by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
The ZAP by Checkmarx Core project
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
Bandit is a tool designed to find common security issues in Python code.
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
A modular vulnerability scanner with automatic report generation capabilities.
A high performance offensive security tool for reconnaissance and vulnerability scanning
A friendly car security exploration tool for the CAN bus
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
cwe_checker finds vulnerable patterns in binary executables
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker
Lightweight Docker monitoring dashboard with anomaly detection & Telegram alerts. One-liner install, zero config.
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.