789 Open source projects that are alternatives of or similar to Evilscan

Faster and more efficient stateless SYN scanner and banner grabber due to userland TCP/IP stack usage.

大型内网渗透扫描器&Cobalt Strike，Ladon8.9内置120个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

🚀 Fast Port Scanner 🚀

🆕 The Multi-Tool Web Vulnerability Scanner.

A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞利用功能

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

WEB SERVICE SECURITY ASSESSMENT TOOL

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

Web application vulnerability scanner

Ladon Pentest Scanner framework 全平台LadonGo开源内网渗透扫描器框架，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机，端口扫描服务识别PortScan。

Golang安全资源合集

The Swiss Army knife for automated Web Application Testing

A Machine Learning approach for classifying a file as Malicious or Legitimate

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Application and Service Fingerprinting

Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

Official Black Hat Arsenal Security Tools Repository

Source Code Security Audit (源代码安全审计)

The legendary netstalking NEtwork SCAnner

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with…

A Docker Image For the Open Vulnerability Assessment Scanner (OpenVAS)

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

Simple Golang HTTPS/TLS Examples

A default credential scanner.

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

It's a simple tool for test vulnerability shellshock

Scrapes Router Passwords From http://www.routerpasswords.com ,more then +300 product

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Open-Source Security Architecture | 开源安全架构

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Qualys sslabs-scan utility in a tiny docker image

Web Scan Lazy Tools - Python Package

Automated NoSQL database enumeration and web application exploitation tool.

Enumeration sub domains(枚举子域名)

RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities

Secure, Unified, Powerful and Extensible Rust Android Analyzer

A collection of security related Python and Bash shell scripts. Analyze hosts on generic security vulnerabilities. Wrapper around popular tools like nmap (portscanner), nikto (webscanner) and testssl.sh (SSL/TLS scanner)

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

Network Security Vulnerability Scanner

A tool that allows you to convert NMAP results to html, csv, json, markdown, graphviz (dot). Simply put it's nmap converter.

Kubernetes RBAC static Analysis & visualisation tool

Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .

swiss army knife for hackers

Next generation web scanner

Bandit is a tool designed to find common security issues in Python code.

An automated target reconnaissance pipeline.

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

DNS Subdomain● Brute force ● Web Spider ● Nmap Scan ● etc

A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

Web-based Source Code Vulnerability Scanner

🔎 shodansploit > v1.3.0