Vulnerability Analysis

misp/misp

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

fuzzdb-project/fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

horsicq/detect-it-easy

Program for determining types of files for Windows, Linux and MacOS.

testssl/testssl.sh

Testing TLS/SSL encryption anywhere on any port

shadow1ng/fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

bitsadmin/wesng

Windows Exploit Suggester - Next Generation

aquasecurity/trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

sullo/nikto

Nikto web server scanner

axi0mx/ipwndfu

open-source jailbreaking tool for many iOS devices

manisso/fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework

nvidia/garak

Modular LLM vulnerability scanner that probes for hallucination, data leakage, prompt injection, jailbreaks, and toxicity using static, dynamic, and…

nomi-sec/poc-in-github

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

bridgecrewio/checkov

Static analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…

google/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

bigbodycobain/shadowbroker

Real-time geospatial OSINT platform aggregating 60+ public telemetry feeds (ADS-B, AIS, satellites, CCTV) into a unified map with server-side recon…

vxcontrol/pentagi

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

owasp-modsecurity/modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…