345 Open source projects that are alternatives of or similar to Vulnfanatic

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Open Vulnerability Assessment Scanner - Scanner for Greenbone Vulnerability Management (GVM)

Advanced vulnerability scanning with Nmap NSE

Ary 是一个集成类工具，主要用于调用各种安全工具，从而形成便捷的一键式渗透。

Tool for information gathering, IPReverse, AdminFInder, DNS, WHOIS, SQLi Scanner with google.

OWASP VBScan is a Black Box vBulletin Vulnerability Scanner

SQL Injection Payload List

Designed to scan and exploit vulnerabilities within Tor hidden services. TORhunter allows most tools to work as normal while resolving .onion

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.

Advanced and easy to use penetration testing framework 💣🔎

Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

web scanner - exploitation - information gathering

Remote control your Greenbone Community Edition or Greenbone Enterprise Appliance

《白帽子讲Web扫描》书籍参考代码

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

NERVE Continuous Vulnerability Scanner

Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

vulscan 扫描系统：最新的poc&exp漏洞扫描，redis未授权、敏感文件、java反序列化、tomcat命令执行及各种未授权扫描等...

🆕 The Multi-Tool Web Vulnerability Scanner.

The Correlated CVE Vulnerability And Threat Intelligence Database API

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

Greenbone Vulnerability Manager

hacker, ready for more of our story ! 🚀

iblessing is an iOS security exploiting toolkit, it mainly includes application information collection, static analysis and dynamic analysis. It can be used for reverse engineering, binary analysis and vulnerability mining.

hack tools

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

vulnx 🕷️ is an intelligent bot auto shell injector that detect vulnerabilities in multiple types of cms { `wordpress , joomla , drupal , prestashop .. `}

Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Docker Scan is a Command Line Interface to run vulnerability detection on your Dockerfiles and Docker images

A static binary vulnerability scanner

Advanced Web Browser Fingerprinting

Scout - a Contactless Active Reconnaissance Tool

Apache Shiro 反序列化漏洞检测与利用工具

(Deprecated) Submit all images in your Kubernetes cluster to Anchore for a vulnerability check and check your configuration with kubeaudit

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

SQL Vulnerability Scanner

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

All-in-one tool for managing vulnerability reports from AppSec pipelines

Wordpress Vulnerability Scanner

Vulnerability (CVE) scanner for Nix/NixOS.

Vulnerability Database | huntr.dev

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

ADAPT is a tool that performs automated Penetration Testing for WebApps.

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Centralize Vulnerability Assessment and Management for DevSecOps Team

Owasp Orizon is a source code static analyzer tool designed to spot security issues in Java applications.

A curated list of vulnerable web applications.

A semi-demi-working proof of concept for a mix of spectre and meltdown vulnerabilities

Shodanwave is a tool for exploring and obtaining information from Netwave IP Camera.

An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability

Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries.

cve-search - a tool to perform local searches for known vulnerabilities

PHP malware detector

Source code for Hacker101.com - a free online web and mobile security class.