Vulnerability Analysis

zaproxy/zaproxy

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

1n3/sn1per

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

infobyte/faraday

Open Source Vulnerability Management Platform

0x6d69636b/windows_hardening

Audits Windows security settings against CIS, Microsoft, STIG, and BSI baselines, scores compliance, and applies hardening changes via registry or…

cloud-architekt/azuread-attack-defense

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can…

ovh/the-bastion

Authentication, authorization, traceability and auditability for SSH accesses.

1n3/findsploit

Find exploits in local and online databases instantly

keensecuritylab/binabsinspector

Static binary vulnerability scanner using abstract interpretation on Ghidra Pcode. Detects CWE classes like buffer overflows, use-after-free, and…

owasp-noir/noir

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.

topscoder/nuclei-wordfence-cve

80k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

rfunix/pompem

Find exploit tool

swisskyrepo/wordpresscan

WPScan rewritten in Python + some WPSeku ideas

praetorian-inc/brutus

Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative…

synacktiv/octoscan

Octoscan is a static vulnerability scanner for GitHub action workflows.

damian89/extended-xss-search

A better version of my xssfinder tool - scans for different types of xss on a list of urls.

crytic/caracal

Static Analyzer for Starknet smart contracts

leviathan36/trigmap

A wrapper for Nmap to quickly run network scans