Scanners-Box
we5ter/scanners-boxA powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
vulnerability-scannersiot-securityweb-security+6
9.0k9 days ago
Tools for identifying, assessing, and prioritizing security weaknesses in systems and applications.
we5ter/scanners-boxA powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
edoardottt/awesome-hacker-search-enginesA curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
promptfoo/promptfooTest your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and…
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
google/syzkallerUnsupervised coverage-guided kernel fuzzer for Linux and major OS kernels; automatically discovers security vulnerabilities through intelligent…
juice-shop/juice-shopIntentionally vulnerable web application covering OWASP Top 10 vulnerabilities for security training, CTF competitions, and penetration testing…
trickest/cveGather and update all available and newest CVEs with their PoC.
peass-ng/peass-ngPEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
juliocesarfort/public-pentesting-reportsA list of public penetration test reports published by several consulting firms and academic security groups.
getsops/sopsSimple and flexible tool for managing secrets
mr-xn/penetration_testing_poc渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor…
facebook/inferA static analyzer for Java, C, C++, and Objective-C
chaitin/safelineSelf-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…
openwrt/openwrtLinux operating system for embedded devices with writable filesystem, package management, and build framework. Enables custom firmware creation for…
infoslack/awesome-web-hackingA list of web application security
keygraphhq/shannonShannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes…
projectdiscovery/nuclei-templatesCommunity curated list of templates for the nuclei engine to find security vulnerabilities.
digininja/dvwaIntentionally vulnerable PHP/MariaDB web application for practicing common web security vulnerabilities across multiple difficulty levels in a legal,…