future-architect / vuls

6.6k

Agent-less vulnerability scanner for Linux, FreeBSD, Container Image, Running Container, WordPress, Programming langu…

Go Updated Jun 28, 2019

CISOfy / lynis

6.1k

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27…

Good first issues

Wrong results with OpenNTPD

good first issue help wanted

#518 opened over 1 year ago by Varbin

6

Gather info on expired passwords and locked accounts

good first issue help wanted

#474 opened over 1 year ago by sigio

3

Shell Updated Jun 24, 2019

zaproxy / zaproxy

5.8k

The OWASP ZAP core project

zap owasp-zap zap-development dast appsec zaproxy owasp security security-scanner

Good first issues

See all

bruteforce: Requests aren't always counted

good first issue IdealFirstBug

#5437 opened 8 days ago by kingthorin

Ability to replace non-ascii values with the Replacer tool

good first issue IdealFirstBug

#5328 opened 2 months ago by marky1124

1

OpenAPI Support fails when importing arrays with primitives as payload

good first issue IdealFirstBug

#5250 opened 4 months ago by markuskiss

12

Java Updated Jun 28, 2019

wpscanteam / wpscan

4.2k

WPScan is a free, for non-commercial use, black box WordPress vulnerability scanner written for security professional…

wordpress wpscan security security-scanner hacking-tool

Ruby Updated Jun 29, 2019

webhintio / hint

2.3k

💡 A hinting engine for the web

a11y performance security best-practices interoperability pwas security-scanner lint pwa hint hints webhint

Good first issues

See all

Show version of browser extension in UI

good first issue area:browser-extension

#2643 opened 2 days ago by antross

[Bug] hint-minified-js generates false positives on bing.com

good first issue area:hint

#2645 opened 1 day ago by antross

Update hint for Set-Cookie header to report all issues up front

good first issue area:hint

#2642 opened 2 days ago by antross

TypeScript Updated Jun 29, 2019

WhaleShark-Team / cobra

1.8k

Source Code Security Audit (源代码安全审计)

cobra code-audit sourcecode-analysis security-tools security-audit security-scanner

Python Updated Jun 27, 2019

toolswatch / blackhat-arsenal-tools

1.8k

Official Black Hat Arsenal Security Tools Repository

blackhat arsenal security-tools hacking-tool security-scanner forensics ics-scada webapp hacking

Updated May 30, 2019

evyatarmeged / Raccoon

1.5k

A high performance offensive security tool for reconnaissance and vulnerability scanning

reconnaissance scanner vulnerability-assessment vulnerability-scanner enumeration pentesting pentest-tool hacking-tool offensive-security security-scanner fuzzing information-gathering hacking raccoon osint

Python Updated Nov 24, 2018

subfinder / subfinder

1.4k

SubFinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework…

Good first issues

Implement Permutation Generation

good first issue enhancement

#125 opened 11 months ago by Ice3man543

2

fix windows colors support

good first issue bug

#112 opened 12 months ago by picatz

Perform Recursive Wildcard Elimination

good first issue enhancement

#46 opened about 1 year ago by Ice3man543

Go Updated Apr 1, 2019

PyCQA / bandit

1.4k

Bandit is a tool designed to find common security issues in Python code.

linter bandit security-tools security-scanner security static-code-analysis python

Good first issues

See all

No content on several links for plugins

good first issue bug

#486 opened 2 months ago by ericwb

Docs plugin listing shows title instead of check name

good first issue bug

#367 opened 11 months ago by ericwb

config file as described in README.rst does not work

good first issue bug

#317 opened about 1 year ago by davidak

3

Python Updated Jun 25, 2019

FeeiCN / GSIL

1.2k

GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）

sensitive-data sensitive-data-security security-tools security-scanner

Python Updated May 14, 2019

codingo / Reconnoitre

1.1k

A security tool for multithreaded information gathering and service enumeration whilst building directory structures …

Python Updated Jun 24, 2019

scipag / vulscan

1.1k

Advanced vulnerability scanning with Nmap NSE

Lua Updated May 22, 2019

countercept / doublepulsar-detection-script

921

A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.

security-scanner security-tools

Python Updated Oct 3, 2018

ajinabraham / NodeJsScan

705

NodeJsScan is a static security code scanner for Node.js applications.

javascript nodejs static-analysis security security-scanner sast devsecops code-analysis code-review node node-security

Python Updated Jun 17, 2019

shekyan / slowhttptest

694

Application Layer DoS attack simulator

security-scanner slowhttptest performance-metrics

C++ Updated Dec 7, 2018

ztgrace / changeme

665

A default credential scanner.

infosec python security penetration-testing security-tools security-scanner default-creds

Python Updated Jun 6, 2019

intrigueio / intrigue-core

644

Discover Your Attack Surface

security-scanner osint vulnerability-scanners penetration-testing security attack-surface reconnaissance intrigue discovery hacking intelligence-gathering

JavaScript Updated Jun 28, 2019

bloodzer0 / ossa

591

Open-Source Security Architecture | 开源安全架构

security security-vulnerability security-tools security-audit security-scanner ids ips business-security application-security code-audit vulnerabilities vulnerability-scanners

Updated Jun 28, 2019

Moham3dRiahi / XAttacker

574

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

Perl Updated Jun 23, 2019

olacabs / jackhammer

570

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

security-vulnerability-assessment vulnerability-management static-code-analysis mobile-security webappsec wordpress-security network-security security-scanner security dynamic-analysis source-code-analysis penetration-testing penetration-testing-framework application-security vulnerability-scanners vulnerability-scanning vulnerability-assessment

Java Updated Apr 22, 2019

denji / golang-tls

502

Simple Golang HTTPS/TLS Examples

http2 https-server https httpclient golang go openssl libressl awesome tools security-hardening security-tools security-audit security-scanner secure security

Updated Apr 30, 2019

dpnishant / jsprime

483

a javascript static security analysis tool

javascript static-analysis security-tools security-scanner

JavaScript Updated May 5, 2015

0xsauby / yasuo

460

A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network

pentesting pentest-tool pentesting-networks hacking-tool network-security pentest-scripts ruby security-tools security-automation security-scanner

Ruby Updated Dec 9, 2017

FeeiCN / ESD

430

Enumeration sub domains(枚举子域名)

subdomain-scanner subdomain-brute security-scanner security-tools brute-force

Python Updated Jun 5, 2019

zegl / kube-score

420

Kubernetes object analysis with recommendations for improved reliability and security

kubernetes linter ci go helm charts static-code-analysis kube-score security security-scanner automation kubernetes-monitoring

Go Updated Jun 24, 2019

eviltik / evilscan

377

NodeJS Simple Network Scanner

scanner port-scanner security-scanner security-tools

JavaScript Updated Jan 23, 2019

0x4D31 / burpa

361

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to auto…

security burp burpsuite python security-tools web-security automation devops security-scanner security-automation

Python Updated Aug 1, 2018

kpcyrd / sn0int

359

Semi-automatic OSINT framework and package manager

osint intelligence osint-framework certificate-transparency rust security security-audit security-scanner investigation reconnaissance recon lua pentesting

Rust Updated Jun 23, 2019

zaproxy / zap-extensions

332

OWASP ZAP Add-ons

zap owasp owasp-zap zaproxy dast appsec security security-scanner

Java Updated Jun 28, 2019

Please note that GitHub no longer supports your web browser.

security-scanner

Repositories 193

Good first issues

Good first issues

Good first issues

Good first issues

Good first issues