#

vulnerability-detection

Here are 260 public repositories matching this topic...

aquasecurity / trivy

Open

Integration with GitLab will stop working in GitLab 15.0

13

thiago-gitlab commented Jan 18, 2022

Container scanning schemas below 14.0.0 have been deprecated.

blob/main/contrib/gitlab.tpl:3 is using a deprecated version:

"version": "2.3",

The latest version of the schema is [14.1.0](https://gitlab.com/gitlab-org/gitla

Read more

help wanted good first issue kind/feature

Open

NPM v7 lockFileVersion = 2 is not supported in Trivy filesystem scan

11

Open

pnpm support would be nice

3

Find more good first issues

CISOfy / lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

linux shell auditing devops unix security-audit pci-dss compliance hardening security-vulnerability security-hardening devops-tools hipaa vulnerability-detection vulnerability-scanners security-scanner vulnerability-assessment gdpr security-tools system-hardening

Updated Mar 17, 2022
Shell

future-architect / vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

go linux golang freebsd security security-audit administrator cybersecurity security-vulnerability vulnerabilities security-hardening vulnerability-detection vulnerability-management vulnerability-scanners security-scanner vulnerability-assessment vuls security-automation security-tools vulnerability-scanner

Updated Mar 17, 2022
Go

projectdiscovery / nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

security vulnerability-detection security-scanner vulnerability-assessment vulnerability-scanner attack-surface subdomain-takeover cve-scanner nuclei-engine

Updated Mar 18, 2022
Go

jeremylong / DependencyCheck

Sponsor

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

security security-audit maven-plugin jenkins-plugin gradle-plugin build-tool ant-task vulnerability-detection software-composition-analysis

Updated Mar 18, 2022
Java

projectdiscovery / nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

security fingerprint exploits nuclei bugbounty vulnerability-detection exploit-development nuclei-templates nuclei-checks

Updated Mar 18, 2022
Python

wazuh / wazuh

Wazuh - The Open Source Security Platform

security elasticsearch log-analysis monitoring incident-response ids intrusion-detection pci-dss compliance security-hardening loganalyzer vulnerability-detection ossec openscap wazuh policy-monitoring security-awareness file-integrity-management

Updated Mar 18, 2022
C

ysrc / xunfeng

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

security security-audit scanner exploits infosec pentesting vulnerability-detection vulnerability-scanners vulnerability-assessment

Updated Mar 16, 2021
Python

Arachni / arachni

Web Application Security Scanner Framework

javascript ruby crawler security-audit modular hack dom analysis scanner detection hacking xss audit web-application penetration-testing sql-injection vulnerability-detection arachni scanners

Updated Mar 17, 2022
Ruby

scipag / vulscan

Advanced vulnerability scanning with Nmap NSE

security security-audit lua exploit lua-script nmap penetration-testing vulnerability vulnerability-databases vulnerability-detection nse vulnerability-identification vulnerability-scanners security-scanner vulnerability-assessment nmap-scripts nsescript nmap-scan-script vulnerability-scanning vulnerability-database-entry

Updated Mar 11, 2022
Lua

cve-search / cve-search

cve-search - a tool to perform local searches for known vulnerabilities

vulnerabilities cve cpe vulnerability-detection cve-scanning vulnerability-assessment common-vulnerabilities cve-search cve-databases cve-entries

Updated Mar 14, 2022
Python

greenbone / openvas-scanner

This repository contains the scanner component for Greenbone Vulnerability Management (GVM). If you are looking for the whole OpenVAS framework please take a look at https://community.greenbone.net/t/frequently-asked-questions-faq/5558.

scanner vulnerability openvas vulnerability-detection vulnerability-management vulnerability-scanners vulnerability-assessment gvm greenbone greenbone-vulnerability-management openvas-scanner

Updated Mar 18, 2022
C

0xInfection / TIDoS-Framework

The Offensive Manual Web Application Penetration Testing Framework.

osint enumeration highlight scanning exploitation vulnerability-detection web-penetration-testing intelligence-gathering web-application-security comprehensive-web reconnaissance footprinting vulnerability-analysis comprehensive web-fuzzer scanning-enumeration tidos-framework

Updated Feb 12, 2021
Python

anouarbensaad / vulnx

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.

bot crawler hacking exploits vulnerability pentest vulnerability-detection vulnerability-assessment information-gathering security-tools cms-detector cloudflare-detection shell-injection vulnerability-exploit website-vulnerability-scanner wp-scanner auto-exploiter dorks detects-vulnerabilities subdomains-gathering

Updated Aug 1, 2021
Python

ThreatMapper

deepfence / ThreatMapper

🔥

🔥 Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more. 🔥

🔥

serverless secops cloud-native security-vulnerability vulnerability-detection vulnerability-management observability vulnerability-scanners vulnerability-assessment log4j2 threat-analysis security-tools cloudsecurity devsecops vulnerability-scanning scanning-tool registry-scanning cwpp

Updated Mar 17, 2022
JavaScript

wagiro / BurpBounty

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

bug-bounty bugbounty vulnerability-detection burpsuite burp-extensions vulnerability-scanner

Updated Dec 13, 2021
BlitzBasic

pyupio / safety

Sponsor

Safety checks your installed dependencies for known security vulnerabilities

python security travis security-vulnerability vulnerability-detection vulnerability-scanners

Updated Jan 11, 2022
Python

XAttacker

Moham3dRiahi / XAttacker

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

wordpress video drupal exploit scanner hacking joomla prestashop pentest exploitation vulnerability-detection hacking-tool security-scanner vulnerability-assessment lokomedia security-tools vulnerability-scanner vulnerability-exploit website-vulnerability-scanner wp-scanner auto-exploiter

Updated Mar 5, 2022
Perl

skavngr / rapidscan

🆕 The Multi-Tool Web Vulnerability Scanner.

scanner enumeration penetration-testing vulnerabilities kali-linux vulnerability-detection offensive-security vulnerability-management vulnerability-scanners security-scanner vulnerability-assessment web-vulnerabilities-scanner security-tools oscp reconnaissance vulnerability-scanner penetration-testing-framework kali-scripts scanner-web security-scanning

Updated Mar 9, 2022
Python

dependency-track

DependencyTrack / dependency-track

Open

Migrate Swagger to OpenAPI 3

2

stevespringett commented Nov 18, 2020

The current swagger definition is autogenerated. The automatically generated definitions rely on reflection and annotations to create the documentation. The reflection capabilities are poor at best and lead to missing API parameters. Annotations can help in some cases, but the only fix for Swagger is to create individual POJOs for every possible request. This will lead to unnecessary large number

Read more

enhancement help wanted p2 good first issue

wireghoul / graudit

Sponsor

grep rough audit - source code auditing tool

shell security security-audit source-code vulnerability-detection security-tools

Updated Mar 1, 2022
Shell

top25-parameter

lutfumertceylan / top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️

⚔️

🧙

security infosec pentesting bugbounty xss-detection vulnerability-detection pentest-tool vulnerability-research bugbountytips

Updated Oct 24, 2021

toolswatch / vFeed

The Correlated CVE Vulnerability And Threat Intelligence Database API

python threat exploits vulnerability scap vulnerability-databases threatintel cve oval vulnerability-detection vulnerability-identification vulnerability-scanners cwe capec intelligence-gathering threat-intelligence vulnerability-database-entry threat-intelligence-database vfeed common-vulnerability-exposure

Updated May 28, 2021
Python

0xricksanchez / paper_collection

Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read

linux iot embedded kernel paper linux-kernel fuzzing exploitation vulnerability-detection mitigations rca sanitizer directed-fuzzing hybrid-fuzzing fuzzing-binaries guided-fuzzing root-cause

Updated Mar 8, 2022

Lucifer1993 / SatanSword

红队综合渗透框架

poc fingerprinting vulnerability-detection vulnerability-scanners security-tools pentest-tool

Updated Dec 13, 2021
Python

seccubus / seccubus

Easy automated vulnerability scanning, reporting and analysis

security analysis ssllabs nmap medusa filters nessus vulnerability-detection seccubus repeated-scans nikto vulnerability-management testssl

Updated Jan 10, 2020
JavaScript

m0nad / HellRaiser

Vulnerability scanner using Nmap for scanning and correlating found CPEs with CVEs.

ruby rails security security-audit network scanner hacking nmap cve network-analysis vulnerability-detection cve-scanning hacking-tool vulnerability-scanners vulnerability-assessment security-tools

Updated Mar 17, 2022
Ruby

Patrowl / PatrowlManager

Open

Feedback

1

antonmalae commented Nov 15, 2018

I think that you are doing a very necessary system and your idea is cool, but at the moment it has a lot of bugs. From what I noticed, the assets do not understand the ascii characters and the system crashes. In addition, I did not find a description of the API, I would like to integrate your system into TheHive, or rather make it possible to view information about an asset in TheHive. I believe t

Read more

good first issue

SkyLined / BugId

Detect, analyze and uniquely identify crashes in Windows applications

Updated Feb 17, 2022
Python

we1h0 / SecurityManageFramwork

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

security security-audit scanner exploits infosec pentesting vulnerability-detection vulnerability-scanners vulnerability-assessment

Updated Jan 6, 2022
Python

Improve this page

Add a description, image, and links to the vulnerability-detection topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the vulnerability-detection topic, visit your repo's landing page and select "manage topics."