2595 Open source projects that are alternatives of or similar to Faraday

SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 🌈

Vulnerability assessment and penetration testing automation and reporting platform for teams.

All-in-one tool for managing vulnerability reports from AppSec pipelines

🔐 Docker Container for Penetration Testing & Security

Dradis Framework: Colllaboration and reporting for IT Security teams

Advanced vulnerability scanning with Nmap NSE

📚 Overview 🔒 Tooling 🔒 Process 🔒 Physical 🔒 People 📚

Idiomatic nmap library for go developers

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

Centralize Vulnerability Assessment and Management for DevSecOps Team

Gorsair hacks its way into remote docker containers that expose their APIs

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. Supports both local repos and container images. Integrates with various CI environments such as Azure Pipelines, CircleCI and Google CloudBuild. No server required!

A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

Pentest Report Generator

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Login hunter of default credentials for administrative web interfaces leveraging NNdefaccts dataset.

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Penetration Testing notes, resources and scripts

Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords

Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam #bugbounty

An Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x86_64, ARMv6, ARMv7 and ARMv8.

Hacking Toolkit

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

被动式漏洞扫描系统

Web path scanner

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.

Powerful Visual Subdomain Enumeration at the Click of a Mouse

Collection of Pentest Notes and Cheatsheets from a lot of repos (SofianeHamlaoui,dostoevsky,mantvydasb,adon90,BriskSec)

A wrapper for Nmap to quickly run network scans

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Code from Blackhat Python book

Red Team Toolkit is an Open-Source Django Offensive Web-App which is keeping the useful offensive tools used in the red-teaming together.

SEC分布式资产扫描系统

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

A list to discover work of red team tooling and methodology for penetration testing and security assessment

A simple tool for interacting with OWASP ZAP from the commandline.

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

Identify vulnerabilities in running containers, images, hosts and repositories

Detects Windows and Linux systems with enabled Trusted Platform Modules (TPM) vulnerable to CVE-2017-15361. #nsacyber

Cameradar hacks its way into RTSP videosurveillance cameras

kube-scan: Octarine k8s cluster risk assessment tool

Misc. Public Reports of Penetration Testing and Security Audits.

A Python tool used to automate the execution of the following tools : Nmap , Nikto and Dirsearch but also to automate the report generation during a Web Penetration Testing

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

A Blazing fast Security Auditing tool for Kubernetes

SQL Injection Payload List

Helps you continuously monitor and fix common security vulnerabilities in your Django application.

Backend logic implementation for Vulnerability Management System