Vulnerability Analysis

trailofbits/skills

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

anthropics/defending-code-reference-harness

Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize

future-architect/vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

greydgl/pentestgpt

Automated Penetration Testing Agentic Framework Powered by Large Language Models

virustotal/yara

The pattern matching swiss knife

bee-san/rustscan

🤖 The Modern Port Scanner 🤖

nvidia/skillspector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and…

phpstan/phpstan

PHP Static Analysis Tool - discover bugs in your code without running it!

trufflesecurity/trufflehog

Find, verify, and analyze leaked credentials

lissy93/web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

anchore/grype

A vulnerability scanner for container images and filesystems

google/security-research

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned…

smicallef/spiderfoot

Automates OSINT data collection and analysis for threat intelligence, attack surface mapping, and reconnaissance. Integrates 200+ modules for DNS,…

quay/clair

Vulnerability Static Analysis for Containers

gitleaks/gitleaks

Fast, open-source static analysis tool for detecting hardcoded secrets like passwords, API keys, and tokens in git repositories, files, and stdin…

owasp/wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

secwiki/windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合