rusty-hog

Rusty Hog is a secret scanner built in Rust for performance, and based on TruffleHog which is written in Python. Rusty Hog provides the following binaries: Ankamali Hog: Scans for secrets in a Google doc. Berkshire Hog: Scans for secrets in an S3 bucket. Choctaw Hog: Scans for secrets in a Git...

agent-bom

Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. Self-host · Deployment models · Quick start · Product tour · Docs agent-bom finds the AI agents, MCP servers, packages and credentials in a repository, w...

phpinfo-files-leaks

Insignias Licencia MIT Instalación 1. Instala Python3 y pip Instrucciones aquí Si no puedes resolver esto, realmente no deberías estar usando esta herramienta Instala mediante pip pip install phpinfo-file-leaks Ejecuta el siguiente comando para comprobar phpinfo-file-leaks -h Configuración 2. Nos...

react2shell-scanner

react2shell-guard Escáner de seguridad para CVE-2025-55182 - una vulnerabilidad crítica CVSS 10.0 de ejecución remota de código no autenticada en React Server Components. ⚠️ AVISO LEGAL Este es un escáner de seguridad , NO una herramienta de explotación. Está diseñado para ayudar a desarrolladores...

raven

!https://img.shields.io/badge/CI/MON%20-none.svg?color=5D65B1&url=https://cimon.build&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCA2My45OCA2My45NyI+PHBhdGggZD0iTTU5LjM5IDMyLjY4Yy0uNS0uNjUtMi4wMi00LjMzLTIuOTctNy4wNSA5LjQtOC43OC43MS0yMi42Mi05...

CVE-2019-15107-Scanner

Escáner de Vulnerabilidad Webmin CVE-2019-15107 Un escáner Python multi-hilo para detectar servidores Webmin vulnerables a CVE-2019-15107 vulnerabilidad de ejecución remota de código autenticada en versiones de Webmin 1.890 a 1.920. Descripción Esta herramienta escanea una lista de servidores...

gosec

gosec - Verificador de Seguridad de Go Inspecciona el código fuente en busca de problemas de seguridad escaneando el AST de Go y la representación de código SSA. Enlaces rápidos GitHub Action Local installation Quick start Common usage patterns Selecting rules Output formats Características Regla...

gosec

gosec - Go Security Checker Inspects source code for security problems by scanning the Go AST and SSA code representation. Quick links GitHub Action Local installation Quick start Common usage patterns Selecting rules Output formats Features Pattern-based rules for detecting common security issue...

wpscan

WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin INSTALL Prerequisites Optional but highly recommended: rbenv Ruby = 3.3 - Recommended: latest stable Curl = 7.72 - Recommended: latest stable The 7.29 has a segfault The 7.72 could result in...

PolyDrop

BYOSI - Bring-Your-Own-Script-Interpreter - Leveraging the abuse of trusted applications, one is able to deliver a compatible script interpreter for a Windows, Mac, or Linux system as well as malicious source code in the form of the specific script interpreter of choice. Once both the malicious...

njsscan

njsscan njsscan is a static application testing SAST tool that can find insecure code patterns in your node.js applications using simple pattern matcher from libsast and syntax-aware semantic code pattern search tool semgrep. Made with in India Support njsscan Donate via Paypal: Sponsor the...

DSSS

Damn Small SQLi Scanner Damn Small SQLi Scanner DSSS is a fully functional SQL injection vulnerability scanner supporting GET and POST parameters written in under 100 lines of code. As of optional settings it supports HTTP proxy together with HTTP header values User-Agent, Referer and Cookie...

log4j-detector

Log4-detector Scanner that detects vulnerable Log4J versions to help teams assess their exposure to CVE-2021-44228 CRITICAL, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Can search for Log4J instances by carefully examining the complete file-system, including all installed applications. It...

safety

!NOTE Come and join us at SafetyCLI. We are hiring for various roles. Table of Contents Table of Contents Introduction Key Features Getting Started GitHub Action Command Line Interface 1. Installation 2. Log In or Register 3. Running Your First Scan Basic Commands Service-Level Agreement SLA...

safety

!NOTE Únete a nosotros en SafetyCLI. Estamos contratando para varios puestos. Índice Índice Introducción Características principales Primeros pasos GitHub Action Interfaz de línea de comandos 1. Instalación 2. Iniciar sesión o registrarse 3. Ejecutar tu primer escaneo Comandos básicos Acuerdo de...

redamon

Unmask the hidden before the world does An autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then goes further by triaging every finding, implementing code fixes, and opening pull requests on your repository. From first packet to merge...

inql

InQL v6.1.2 - Burp Extension for Advanced GraphQL Testing !Doyensec Research...

inql

InQL v6.1.2 - Extensión de Burp para Pruebas Avanzadas de GraphQL !Doyensec Research...

vigolium

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...

PyMemoryEditor

PyMemoryEditor A pure-Python library built on ctypes that lets you inspect, modify and search the memory of any running process in a few lines of Python — Cheat Engine workflows on Windows, Linux and macOS! Read, write and scan the memory of any process — straight from Python. One unified API...