833 Open source projects that are alternatives of or similar to Vulscan

Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues

红队综合渗透框架

hacker, ready for more of our story ! 🚀

Ary 是一个集成类工具，主要用于调用各种安全工具，从而形成便捷的一键式渗透。

Arissploit Framework is a simple framework designed to master penetration testing tools. Arissploit Framework offers simple structure, basic CLI, and useful features for learning and developing penetration testing tools.

Security-related PHP7 OPcache abuse tools and demo

🆕 The Multi-Tool Web Vulnerability Scanner.

Open-Source Security Architecture | 开源安全架构

All-in-one tool for managing vulnerability reports from AppSec pipelines

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Proofs-of-concept

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

Exploit Pack -The next generation exploit framework

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

fireELF - Fileless Linux Malware Framework

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

OSS Vulnerability Scanner for Windows Platform

Find secrets and passwords in container images and file systems

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

Docker Scan is a Command Line Interface to run vulnerability detection on your Dockerfiles and Docker images

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Misc. Public Reports of Penetration Testing and Security Audits.

Advanced Web Browser Fingerprinting

SQL Injection Payload List

(Deprecated) Submit all images in your Kubernetes cluster to Anchore for a vulnerability check and check your configuration with kubeaudit

Vulnerability Notes, PoC Exploits and Write-Ups for security issues disclosed by tintinweb

A Binary Ninja plugin for vulnerability research.

Advanced vulnerability scanning with Nmap NSE

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

NERVE Continuous Vulnerability Scanner

web scanner - exploitation - information gathering

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.

Web-based Source Code Vulnerability Scanner

It's a simple tool for test vulnerability shellshock

vulnx 🕷️ is an intelligent bot auto shell injector that detect vulnerabilities in multiple types of cms { `wordpress , joomla , drupal , prestashop .. `}

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Exploit management framework

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

Advanced and easy to use penetration testing framework 💣🔎

Greenbone Vulnerability Manager

CVE-2020-11651: Proof of Concept

A static binary vulnerability scanner

Juniper Junos Space (CVE-2020-1611) (PoC)

D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange.

ProxyToken (CVE-2021-33766) : An Authentication Bypass in Microsoft Exchange Server POC exploit

Designed to scan and exploit vulnerabilities within Tor hidden services. TORhunter allows most tools to work as normal while resolving .onion

NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473

A static analysis tool for security

Ladon Pentest Scanner framework 全平台LadonGo开源内网渗透扫描器框架，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机，端口扫描服务识别PortScan。

Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration

OWASP VBScan is a Black Box vBulletin Vulnerability Scanner

Apache Shiro 反序列化漏洞检测与利用工具

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

大型内网渗透扫描器&Cobalt Strike，Ladon8.9内置120个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

A Docker Image For the Open Vulnerability Assessment Scanner (OpenVAS)

iblessing is an iOS security exploiting toolkit, it mainly includes application information collection, static analysis and dynamic analysis. It can be used for reverse engineering, binary analysis and vulnerability mining.

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform