Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

Stars: ✭ 216 (-87.76%)

Mutual labels: security-tools, security-scanner

Cobra

Source Code Security Audit (源代码安全审计)

Stars: ✭ 2,802 (+58.84%)

Mutual labels: security-tools, security-scanner

Esd

Enumeration sub domains(枚举子域名)

Stars: ✭ 785 (-55.5%)

Mutual labels: security-tools, security-scanner

Yasuo

A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network

Stars: ✭ 517 (-70.69%)

Mutual labels: security-tools, security-scanner

Nosqli

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.

Stars: ✭ 120 (-93.2%)

Mutual labels: security-tools, security-scanner

Inql

InQL - A Burp Extension for GraphQL Security Testing

Stars: ✭ 715 (-59.47%)

Mutual labels: security-tools, security-scanner

Kube Scan

kube-scan: Octarine k8s cluster risk assessment tool

Stars: ✭ 566 (-67.91%)

Mutual labels: security-tools, security-scanner

Machine Learning Approach For Malware Detection

A Machine Learning approach for classifying a file as Malicious or Legitimate

Stars: ✭ 35 (-98.02%)

Mutual labels: security-tools, security-scanner

Super

Secure, Unified, Powerful and Extensible Rust Android Analyzer

Stars: ✭ 340 (-80.73%)

Mutual labels: security-tools, security-scanner

Vulny Code Static Analysis

Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

Stars: ✭ 207 (-88.27%)

Mutual labels: security-tools, security-scanner

Ladon

大型内网渗透扫描器&Cobalt Strike，Ladon8.9内置120个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

Stars: ✭ 2,911 (+65.02%)

Mutual labels: security-tools, security-scanner

Salt Scanner

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

Stars: ✭ 261 (-85.2%)

Mutual labels: security-tools, security-scanner

Bandit

Bandit is a tool designed to find common security issues in Python code.

Stars: ✭ 3,763 (+113.32%)

Mutual labels: security-tools, security-scanner

Burpa

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

Stars: ✭ 427 (-75.79%)

Mutual labels: security-tools, security-scanner

Evilscan

NodeJS Simple Network Scanner

Stars: ✭ 428 (-75.74%)

Mutual labels: security-tools, security-scanner

Rapidscan

🆕 The Multi-Tool Web Vulnerability Scanner.

Stars: ✭ 775 (-56.07%)

Mutual labels: security-tools, security-scanner

Jsprime

a javascript static security analysis tool

Stars: ✭ 556 (-68.48%)

Mutual labels: security-tools, security-scanner

Doublepulsar Detection Script

A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.

Stars: ✭ 977 (-44.61%)

Mutual labels: security-tools, security-scanner

Gitgot

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

Stars: ✭ 964 (-45.35%)

Mutual labels: security-tools, security-scanner

Pentest Chainsaw

Scrapes Router Passwords From http://www.routerpasswords.com ,more then +300 product

Stars: ✭ 36 (-97.96%)

Mutual labels: security-tools, security-scanner

Taipan

Web application vulnerability scanner

Stars: ✭ 359 (-79.65%)

Mutual labels: security-tools, security-scanner

Salus

Security scanner coordinator

Stars: ✭ 441 (-75%)

Mutual labels: security-tools, security-scanner

Ossa

Open-Source Security Architecture | 开源安全架构

Stars: ✭ 796 (-54.88%)

Mutual labels: security-tools, security-scanner

Patrowlmanager

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Stars: ✭ 363 (-79.42%)

Mutual labels: security-tools, security-scanner

Golang Tls

Simple Golang HTTPS/TLS Examples

Stars: ✭ 857 (-51.42%)

Mutual labels: security-tools, security-scanner

Hacking With Golang

Golang安全资源合集

Stars: ✭ 876 (-50.34%)

Mutual labels: security-tools, security-scanner

Reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

Stars: ✭ 1,824 (+3.4%)

Mutual labels: security-tools, security-scanner

Applicationinspector

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

Stars: ✭ 3,873 (+119.56%)

Mutual labels: security-tools, security-scanner

Patrowldocs

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Stars: ✭ 105 (-94.05%)

Mutual labels: security-tools, security-scanner

Security Scripts

A collection of security related Python and Bash shell scripts. Analyze hosts on generic security vulnerabilities. Wrapper around popular tools like nmap (portscanner), nikto (webscanner) and testssl.sh (SSL/TLS scanner)

Stars: ✭ 188 (-89.34%)

Mutual labels: security-tools, security-scanner

Blackhat Arsenal Tools

Official Black Hat Arsenal Security Tools Repository

Stars: ✭ 2,639 (+49.6%)

Mutual labels: security-tools, security-scanner

Awesome Shodan Queries

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

Stars: ✭ 2,758 (+56.35%)

Mutual labels: security-tools, security-scanner

Krane

Kubernetes RBAC static Analysis & visualisation tool

Stars: ✭ 254 (-85.6%)

Mutual labels: security-tools, security-scanner

Vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Stars: ✭ 8,844 (+401.36%)

Mutual labels: security-tools, security-scanner

Minesweeper

A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

Stars: ✭ 162 (-90.82%)

Mutual labels: security-tools, security-scanner

Shodansploit

🔎 shodansploit > v1.3.0

Stars: ✭ 342 (-80.61%)

Mutual labels: security-tools, security-scanner

Xattacker

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

Stars: ✭ 897 (-49.15%)

Mutual labels: security-tools, security-scanner

Lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Stars: ✭ 9,137 (+417.97%)

Mutual labels: security-tools, security-scanner

Intrigue Ident

Application and Service Fingerprinting

Stars: ✭ 70 (-96.03%)

Mutual labels: security-tools, security-scanner

Deksterecon

Web Application recon automation

Stars: ✭ 109 (-93.82%)

Mutual labels: security-tools

Security Checker

A PHP dependency vulnerabilities scanner based on the Security Advisories Database.