This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Secure Ios App Dev

Collection of the most common vulnerabilities found in iOS applications

✭ 1,288

ios security security-audit vulnerability-assessment

Security Assessment

Scripts to automate some part of Security/Vulnerability Assessment

✭ 75

powershell security vulnerability-assessment

Purify

All-in-one tool for managing vulnerability reports from AppSec pipelines

✭ 72

vue security security-tools infosec security-audit nestjs vulnerability-scanners vuetify security-automation devsecops appsec vulnerability-assessment vulnerability-management

Intrigue Ident

Application and Service Fingerprinting

✭ 70

ruby security-tools security-scanner vulnerability-assessment

Vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

✭ 8,844

go linux security security-tools cybersecurity security-audit freebsd vulnerabilities vulnerability-scanners security-scanner security-automation security-hardening vulnerability-detection security-vulnerability vulnerability-assessment vulnerability-scanner vulnerability-management administrator vuls

Lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Openvas Scanner

Open Vulnerability Assessment Scanner - Scanner for Greenbone Vulnerability Management (GVM)

✭ 1,056

c scanner vulnerability vulnerability-scanners vulnerability-detection vulnerability-assessment vulnerability-management

Vulnx

vulnx 🕷️ is an intelligent bot auto shell injector that detect vulnerabilities in multiple types of cms { `wordpress , joomla , drupal , prestashop .. `}

✭ 1,009

python bot hacking security-tools crawler pentest hacking-tool vulnerability exploitation information-gathering vulnerability-detection vulnerability-assessment

Local File Disclosure Sql Injection Lab

This is sample code to demonstrate how one can use SQL Injection vulnerability to download local file from server in specific condition. If you have any doubt, ping me at https://twitter.com/IndiShell1046 :)

✭ 41

sql-injection vulnerability-assessment

Xattacker

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

✭ 897

perl wordpress hacking security-tools scanner exploit pentest hacking-tool exploitation security-scanner drupal vulnerability-detection joomla vulnerability-assessment vulnerability-scanner

Rapidscan

🆕 The Multi-Tool Web Vulnerability Scanner.

✭ 775

python security-tools penetration-testing scanner vulnerabilities reconnaissance vulnerability-scanners security-scanner kali-linux enumeration vulnerability-detection oscp offensive-security vulnerability-assessment vulnerability-scanner vulnerability-management penetration-testing-framework

Jackhammer

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

✭ 633

java security penetration-testing static-code-analysis vulnerability-scanners security-scanner dynamic-analysis network-security application-security vulnerability-assessment mobile-security vulnerability-management penetration-testing-framework

Vanquish

Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.

✭ 449

python penetration-testing vulnerability-scanners kali-linux oscp offensive-security vulnerability-assessment penetration-testing-framework

Hellraiser

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

✭ 413

ruby security rails hacking network security-tools scanner hacking-tool security-audit network-analysis vulnerability-scanners nmap cve vulnerability-detection vulnerability-assessment

Securitymanageframwork

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

✭ 378

python security pentesting scanner infosec security-audit vulnerability-scanners exploits vulnerability-detection vulnerability-assessment

Watchdog

Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.

✭ 345

python security security-tools bugbounty pentest-tool security-vulnerability network-security application-security vulnerability-assessment security-testing vulnerability-management penetration-testing-framework

Nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

✭ 6,307

go vulnerability-detection vulnerability-assessment vulnerability-scanner security subdomain-takeover cve-scanner nuclei-engine

Celerystalk

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

✭ 333

python spider screenshot vulnerability-scanners celery enumeration nmap scanning subdomain vulnerability-assessment

Hackerenv

✭ 309

shell pentesting pentest hacking-tool pentest-tool vulnerability-scanners kali-linux vulnerability-assessment pentest-scripts

Xunfeng

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

✭ 3,131

python Less javascript HTML shell Dockerfile security pentesting scanner infosec security-audit vulnerability-scanners exploits vulnerability-detection vulnerability-assessment

Nerve

NERVE Continuous Vulnerability Scanner

✭ 267

python security security-tools vulnerability-scanners vulnerability-detection vulnerability-assessment security-testing

JWTweak

Detects the algorithm of input JWT Token and provide options to generate the new JWT token based on the user selected algorithm.

✭ 85

python automation jwt authentication authorization jwt-tokens application-security pentesting bugbounty appsec vulnerability-assessment jwt-algorithm security-enthusiasts

aeacus

🔐 Vulnerability remediation scoring system

✭ 52

go shell Makefile windows linux cybersecurity cyberpatriot vulnerability-assessment elysium-suite

Libellux-Up-and-Running

Libellux: Up & Running provides documentation on how-to install open-source software from source. The focus is Zero Trust Network to enhance the security for existing applications or install tools to detect and prevent threats.

✭ 19