vulnerability-scanners

hack tools

An IIS short filename enumeration tool

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/

为供应链漏洞扫描设计的快速应急响应工具 [快速应急] [漏洞扫描] [端口扫描] [xray2.0进行时] A fast emergency response tool designed for supply chain vulnerability scanning.

AI-powered penetration testing assistant for automating recon, note-taking, and vulnerability analysis.

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.

Apache Block Bad Bots, (Referer) Spam Referrer Blocker, Vulnerability Scanners, Malware, Adware, Ransomware, Malicious Sites, Wordpress Theme Detectors and Fail2Ban Jail for Repeat Offenders

一个开源的、开箱即用的漏洞批量验证框架

Docker containers vulnerability scan

🍉一款基于Python-Django的多功能Web安全渗透测试工具，包含漏洞扫描，端口扫描，指纹识别，目录扫描，旁站扫描，域名扫描等功能。

Robber is open source tool for finding executables prone to DLL hijacking

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Scans Software Bill of Materials (SBOMs) for security vulnerabilities

Jie stands out as a comprehensive security assessment and exploitation tool meticulously crafted for web applications. Its robust suite of features encompasses vulnerability scanning, information gathering, and exploitation, elevating it to an indispensable toolkit for both security professionals and penetration testers. 挖洞辅助工具(漏洞扫描、信息收集)

the blazing-fast pentesting suite.

Red Team Toolkit is an Open-Source Django Offensive Web-App which is keeping the useful offensive tools used in the red-teaming together.