threat9 / routersploit

Star

Exploitation Framework for Embedded Devices

python security embedded router scanner bruteforce exploits infosec router-exploitation-framework routersploit-framework dictionary-attack routersploit creds

Updated Dec 22, 2020
Python

wpscanteam / wpscan

Star

WPScan is a free, for non-commercial use, black box WordPress security scanner written for security professionals and blog maintainers to test the security of their WordPress websites.

wordpress security scanner scan wpscan hacking-tool security-scanner

Updated Jan 15, 2021
Ruby

maurosoria / dirsearch

Star

Web path scanner

Updated Jan 19, 2021
Python

We5ter / Scanners-Box

Star

A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

scanner database-vulnerability-scanners information-security vulnerability-scanners hacker-tools pentesting-tools

Updated Jan 11, 2021

1N3 / Sn1per

Star

Automated pentest framework for offensive security experts

Updated Jan 20, 2021
Shell

andresriancho / w3af

Star

w3af: web application attack and audit framework, the open source web vulnerability scanner.

security scanner sql-injection appsec cross-site-scripting

Updated Oct 6, 2020
Python

k8gege / K8tools

Star

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

database apt exploit scanner hacking password poc brute-force pentest bypass crack privilege-escalation 0day getshell netscan rar-mysql

Updated Dec 30, 2020
PowerShell

infoslack / awesome-web-hacking

Star

A list of web application security

scanner hacking penetration-testing web-security vulnerabilities metasploit web-hacking hacking-tools

Updated Oct 4, 2020

sundowndev / PhoneInfoga

Star

Advanced information gathering & OSINT framework for phone numbers

osint phone-number phone scanner reputation scanning footprint information-gathering investigation reconnaissance agregation open-source-intelligence osint-reconnaissance passive-scanner

Updated Jan 18, 2021
Go

ysrc / xunfeng

Star

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

security security-audit scanner exploits infosec pentesting vulnerability-detection vulnerability-scanners vulnerability-assessment

Updated Jan 29, 2020
Python

urbanadventurer / WhatWeb

Star

Next generation web scanner

Updated Jan 19, 2021
Ruby

Arachni / arachni

Star

Web Application Security Scanner Framework

javascript ruby crawler security-audit modular hack dom analysis scanner detection hacking xss audit web-application penetration-testing sql-injection vulnerability-detection arachni scanners

Updated Jan 28, 2020
Ruby

elceef / dnstwist

Star

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

dns osint scanner phishing domains fuzzing threat-hunting typosquatting threat-intelligence homograph-attack idn

Updated Jan 4, 2021
Python

RetireJS / retire.js

Star

scanner detecting the use of JavaScript libraries with known vulnerabilities

javascript chrome-extension security scanner grunt-plugins firefox-extension build-tool vulnerabilities software-composition-analysis vulnerable-libraries insecure-libraries

Updated Jan 2, 2021
JavaScript

projectdiscovery / nuclei

Star

Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use.

scanner cybersecurity vulnerability-scanner subdomain-takeover cve-scanner

Updated Jan 19, 2021
Go

zhoubear / open-paperless

Star

Scan, index, and archive all of your paper documents (acquired by Mayan EDMS)

pdf ocr scanner office documents groupware paperless

Updated Dec 10, 2018
Python

yogeshojha / rengine

Star

reNgine is an automated reconnaissance framework meant for information gathering during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.

osint scanner recon security-tools reconnaissance scanner-web recon-engine

Updated Jan 17, 2021
Python

openpaperwork / paperwork

Star

Personal document manager (Linux/Windows) -- Moved to Gnome's Gitlab

python pdf gtk ocr scanner python3 paperwork indexing gtk3 dms document-management personal-document-system sane edms

Updated Jun 13, 2018
Python

WeTransfer / WeScan

Star

Document Scanning Made Easy for iOS

swift ios scanner

Updated Dec 23, 2020
Swift

k8gege / Ladon

Star

大型内网渗透扫描器&Cobalt Strike，Ladon7.2内置94个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

security tools hack exploit scanner hacking password poc brute-force pentest portscan security-scanner exp security-tools ladon ipscanner getshell netscan

Updated Jan 16, 2021
C#

tfsec / tfsec

Star

Open

RDS checks do not work with terraform-aws-modules/rds/aws module (nested modules issue?)

1

lboynton commented Dec 27, 2020

Describe the bug
The RDS checks in tfsec do not detect issues in usage of the RDS module available at: https://registry.terraform.io/modules/terraform-aws-modules/rds/aws/latest

To Reproduce
Steps to reproduce the behaviour:

Create the following terraform file:

module "db" {
  source = "terraform-aws-modules/rds/aws"
  version = "~> 2.0"

  identifier = "demodb"

check skipped due to errors

1

evyatarmeged / Raccoon

Star

A high performance offensive security tool for reconnaissance and vulnerability scanning

osint scanner hacking enumeration fuzzing pentesting offensive-security hacking-tool security-scanner vulnerability-assessment information-gathering reconnaissance pentest-tool vulnerability-scanner raccoon

Updated Mar 5, 2020
Python

m4ll0k / WAScan

Star

WAScan - Web Application Scanner

sql web scanner injection xss webapp

Updated Apr 29, 2020
Python

Neo23x0 / Loki

Star

Loki - Simple IOC and Incident Response Scanner

python ioc scanner signature hash dfir antivirus yara yara-rules otx

Updated Jan 17, 2021
Python

H4ckForJob / dirmap

Star

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

scanner dirscanner pentest-tool scanner-web

Updated Dec 3, 2020
Python

jenly1314 / ZXingLite

Star

🔥 ZXing的精简版，优化扫码和生成二维码/条形码，内置闪光灯等功能。扫描风格支持：微信的线条样式，支付宝的网格样式。几句代码轻松拥有扫码功能，ZXingLite让集成更简单。（扫码识别速度快如微信）

Updated Jan 14, 2021
Java

codingo / Reconnoitre

Star

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

Updated Jul 6, 2020
Python

codingo / NoSQLMap

Star

Automated NoSQL database enumeration and web application exploitation tool.

couchdb redis security-audit mongodb nosql scanner hacking databases enumeration penetration-testing nosql-databases sql-injection bugbounty mongodb-database offensive-security hacktoberfest hacking-tool security-tools web-application-security security-toolset

Updated Jul 27, 2020
Python

Tuhinshubhra / RED_HAWK

Star

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

wordpress crawler scanner http-header wordpress-scanner whois-lookup mx-lookup sql-scanner information-gathering geo-ip admin-scanner backups-finder sql-vulnerability-scannig subnet-lookup cms-detector cloudflare-detection subdomain-scanner reverse-ip-scan domain-authority-scanner page-authority-scanner

Updated Sep 17, 2020
PHP

psecio / iniscan

Star

A php.ini scanner for best security practices

php security scanner configuration ini

Updated Jul 22, 2018
PHP

scanner

Here are 1,363 public repositories matching this topic...

threat9 / routersploit

wpscanteam / wpscan

maurosoria / dirsearch

We5ter / Scanners-Box

1N3 / Sn1per

andresriancho / w3af

k8gege / K8tools

infoslack / awesome-web-hacking

sundowndev / PhoneInfoga

ysrc / xunfeng

urbanadventurer / WhatWeb

Arachni / arachni

elceef / dnstwist

RetireJS / retire.js

projectdiscovery / nuclei

zhoubear / open-paperless

yogeshojha / rengine

openpaperwork / paperwork

WeTransfer / WeScan

k8gege / Ladon

tfsec / tfsec

RDS checks do not work with terraform-aws-modules/rds/aws module (nested modules issue?)

check skipped due to errors

evyatarmeged / Raccoon

m4ll0k / WAScan

Neo23x0 / Loki

H4ckForJob / dirmap

jenly1314 / ZXingLite

codingo / Reconnoitre

codingo / NoSQLMap

Tuhinshubhra / RED_HAWK

psecio / iniscan

Improve this page

Add this topic to your repo