863 Open source projects that are alternatives of or similar to sec-scannode

分布式资产安全扫描核心管理系统(弱口令扫描，漏洞扫描)

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

被动式漏洞扫描系统

All-in-one tool for managing vulnerability reports from AppSec pipelines

Web-based Source Code Vulnerability Scanner

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). 🌈

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.

Snoop — инструмент разведки на основе открытых данных (OSINT world)

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

Open Vulnerability Assessment Scanner - Scanner for Greenbone Vulnerability Management (GVM)

Security scanner for your Terraform code

The Swiss Army knife for automated Web Application Testing

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with…

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

Agent scanner for vulners.com

Pentest Report Generator

Automatic SQL injection with Charles and sqlmap api

Web Application Security Scanner Framework

Dradis Framework: Colllaboration and reporting for IT Security teams

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

📚 Overview 🔒 Tooling 🔒 Process 🔒 Physical 🔒 People 📚

The Web Exploit Detector is a Node.js application used to detect possible infections, malicious code and suspicious files in web hosting environments

A scanner for Moodle LMS

Tool for information gathering, IPReverse, AdminFInder, DNS, WHOIS, SQLi Scanner with google.

Pentest Tools Framework is a database of exploits, Scanners and tools for penetration testing. Pentest is a powerful framework includes a lot of tools for beginners. You can explore kernel vulnerabilities, network vulnerabilities

Advanced dork Search & Mass Exploit Scanner

A toolkit for Security Researchers

Exploitation Framework for Embedded Devices

Misc. Public Reports of Penetration Testing and Security Audits.

🆕 The Multi-Tool Web Vulnerability Scanner.

GDA is a new fast and powerful decompiler in C++(working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, dat…

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

Biu-framework🚀 Security Scan Framework For Enterprise Intranet Based Services(企业内网基础服务安全扫描框架)

A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.

Advanced vulnerability scanning with Nmap NSE

A Blazing fast Security Auditing tool for Kubernetes

Open-Source Security Architecture | 开源安全架构

Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架

A static binary vulnerability scanner

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Automated NoSQL database enumeration and web application exploitation tool.

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .

Fast and customizable vulnerability scanner For JIRA written in Python

🦁 Juumla is a python tool created to identify Joomla version, scan for vulnerabilities and search for config or backup files.

Pentest: Subdomains enumeration tool for penetration testers.

Backend logic implementation for Vulnerability Management System

Zero-setup SSH-based scanner with extensive visualizations for Debian server inventory, policy compliance and vulnerabilities

🖖 Fast, modern, easy-to-use network scanner

OWASP Joomla Vulnerability Scanner Project

Web path scanner

pentest framework

Fully open-source security audit for project dependencies based on known vulnerabilities and advisories. Supports both local repos and container images. Integrates with various CI environments such as Azure Pipelines, CircleCI and Google CloudBuild. No server required!

sgCheckup generates nmap output based on scanning your AWS Security Groups for unexpected open ports.

RFMap - Radio Frequency Mapper