1323 Open source projects that are alternatives of or similar to Vulscan

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

🆕 The Multi-Tool Web Vulnerability Scanner.

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Advanced Web Browser Fingerprinting

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.

NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Login hunter of default credentials for administrative web interfaces leveraging NNdefaccts dataset.

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

Nmap and NSE command line wrapper in the style of Metasploit

SQL Injection Payload List

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

Open Vulnerability Assessment Scanner - Scanner for Greenbone Vulnerability Management (GVM)

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

nnposter's alternate fingerprint dataset for Nmap script http-default-accounts

Ary 是一个集成类工具，主要用于调用各种安全工具，从而形成便捷的一键式渗透。

Discover Your Attack Surface!

vulnx 🕷️ is an intelligent bot auto shell injector that detect vulnerabilities in multiple types of cms { `wordpress , joomla , drupal , prestashop .. `}

A Binary Ninja plugin for vulnerability research.

Nmap Log4Shell NSE script for discovery Apache Log4j RCE (CVE-2021-44228)

A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

python3批量poc检测工具

Red Team Toolkit is an Open-Source Django Offensive Web-App which is keeping the useful offensive tools used in the red-teaming together.

A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner

My collection of nmap nse modules

Docker Scan is a Command Line Interface to run vulnerability detection on your Dockerfiles and Docker images

Misc. Public Reports of Penetration Testing and Security Audits.

All-in-one tool for managing vulnerability reports from AppSec pipelines

🐞 Primitive Erlang Security Tool

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

🏴‍☠️ Pwn misconfigured sites running ShareX custom image uploader API through chained exploit

Nmap NSE scripts

Apache Shiro 反序列化漏洞检测与利用工具

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

🔎 Python framework to automatically discover and enumerate hosts from different back-end systems (Shodan, Censys)

OWASP VBScan is a Black Box vBulletin Vulnerability Scanner

iblessing is an iOS security exploiting toolkit, it mainly includes application information collection, static analysis and dynamic analysis. It can be used for reverse engineering, binary analysis and vulnerability mining.

Web Application Security Scanner Framework

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

network reconnaissance toolkit

Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

NERVE Continuous Vulnerability Scanner

Open-Source Security Architecture | 开源安全架构

The Correlated CVE Vulnerability And Threat Intelligence Database API

Tool for information gathering, IPReverse, AdminFInder, DNS, WHOIS, SQLi Scanner with google.

hack tools

Advanced and easy to use penetration testing framework 💣🔎

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.

Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

Pentest Tools Framework is a database of exploits, Scanners and tools for penetration testing. Pentest is a powerful framework includes a lot of tools for beginners. You can explore kernel vulnerabilities, network vulnerabilities