870 Open source projects that are alternatives of or similar to Satansword

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

NERVE Continuous Vulnerability Scanner

OSS Vulnerability Scanner for Windows Platform

Advanced and easy to use penetration testing framework 💣🔎

Advanced Web Browser Fingerprinting

Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

🆕 The Multi-Tool Web Vulnerability Scanner.

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

vulnx 🕷️ is an intelligent bot auto shell injector that detect vulnerabilities in multiple types of cms { `wordpress , joomla , drupal , prestashop .. `}

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

Open-Source Security Architecture | 开源安全架构

Cat-Nip Automated Basic Pentest Tool - Designed For Kali Linux

Set of tools to audit SIP based VoIP Systems

A ZigBee hacking toolkit by Bishop Fox

Attack Surface Management Platform | Sn1perSecurity LLC

hacker, ready for more of our story ! 🚀

PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.

A tool to test security of json web token

大型内网渗透扫描器&Cobalt Strike，Ladon8.9内置120个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

CMS/LMS/Library etc Versions Fingerprinter

Mixeway Scanner is Spring Boot application which aggregate integration with number of OpenSource Vulnerability scanners - both SAST and DAST types

Find secrets and passwords in container images and file systems

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞利用功能

System Optimizer and Monitoring, Security Auditing, Vulnerability scanner for Linux, macOS, and UNIX-based systems

All-in-one tool for managing vulnerability reports from AppSec pipelines

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Web Recon & Exploitation Tool.

SQL Injection Payload List

Use ExpiredDomains.net and BlueCoat to find useful domains for red team.

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473

A tool for identifying misconfigured CloudFront domains

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

A static analysis tool for security

Static and dynamic Android application security analysis

Find exploit tool

Port of "DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers" to Clang/LLVM 10 and Linux Kernel

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

集漏洞验证和任务运行的一个框架

A Docker Image For the Open Vulnerability Assessment Scanner (OpenVAS)

network visualization & vulnerability management/reporting

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

Search for Directory Traversal Vulnerabilities

Web-based Source Code Vulnerability Scanner

A REST API security testing framework.

Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.

👻Impost3r -- A linux password thief

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

Docker Scan is a Command Line Interface to run vulnerability detection on your Dockerfiles and Docker images

Fully automated offensive security framework for reconnaissance and vulnerability scanning

Ladon Pentest Scanner framework 全平台LadonGo开源内网渗透扫描器框架，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机，端口扫描服务识别PortScan。