Stars
The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
A next-generation crawling and spidering framework.
🔓 🔓 Find secrets and passwords in container images and file systems 🔓 🔓
Gather and update all available and newest CVEs with their PoC.
BDD Automated Security Tests for Web Applications
Scrape domain names from SSL certificates of arbitrary hosts
uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories, find IoT devices, detect versions of web application…
Snyk CLI scans and monitors your projects for security vulnerabilities.
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernet…
File upload vulnerability scanner and exploitation tool.
Fetch all the URLs that the Wayback Machine knows about for a domain
A powerful browser crawler for web vulnerability scanners
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
DNSTake — A fast tool to check missing hosted DNS zones that can lead to subdomain takeover
A powerful and useful hacker dictionary builder for a brute-force attack
In-depth attack surface mapping and asset discovery
The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, …
Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
A tool that can help detect and takeover subdomains with dead DNS records
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!