security-audit

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

Directory Services Internals (DSInternals) PowerShell Module and Framework

Cybersecurity Evaluation Tool

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

safely install npm packages by auditing them pre-install stage

grep rough audit - source code auditing tool

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

SSH-MITM - ssh audits made simple

Agent-driven automated CVE discovery platform for source code auditing, vulnerability verification, and report generation.

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

Professional slash commands for Claude Code that provide structured workflows for software development tasks including code review, feature creation, security auditing, and architectural analysis.

Agentic offensive-security in your terminal

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

secator - the pentester's swiss knife

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

An IIS short filename enumeration tool

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

Security advisory database for Rust crates published through crates.io

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks

RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!

A Blazing fast Security Auditing tool for Kubernetes

Tool for building Kubernetes attack paths

Self-hosted optimization, monitoring (NMS), and security audit tool for UniFi Networks. Includes Wi-Fi Optimizer for wireless health scoring and channel optimization, advanced DNS/VLAN/firewall security checks, config optimization suggestions, centralized WAN and LAN speed test server w/ L2 tracing, CM, ONT, SFP, 5G modem stats +more.​​​​​​​​​​​​​

Hacking Toolkit

Web Content Discovery Tool

DianXing - AI-Driven End-to-End Code Security Auditing

Make production Rust binaries auditable