vulnerability-scanners

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

Tfsec is now part of Trivy

Open Source Vulnerability Management Platform

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Open Source Cloud Native Application Protection Platform (CNAPP)

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

This repository contains the scanner component for Greenbone Community Edition.

Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders

Advanced vulnerability scanning with Nmap NSE

EMBA - The firmware security analyzer

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

Open source vulnerability DB and triage service.

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

Kubernetes-native security toolkit

safely install npm packages by auditing them pre-install stage

Awesome Pentest Tools Collection

ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes

Advanced dork Search & Mass Exploit Scanner

AutoPentestX – Automated Pentesting & Vulnerability Reporting Tool

Burp被动扫描流量转发插件

secator - the pentester's swiss knife

The fastest dork scanner written in Go.

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.